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To your love, happiness, and success. 

The world of information systems presents new 
and exciting challenges each and every day. Creating a 
textbook to capture this world is a formidable task, to be 
sure. This, the 15th edition of Introduction to Information 
Systems, represents the best we have to offer. We take 
pride in delivering this new edition to you and we thank 
all of you for your loyalty to the book and the input you 
provided that was instrumental in its development. Your 
continued support fills us with joy and a sense of both 
accomplishment and contribution. 

We are also pleased and excited to welcome a new 
member to our writing family. Miguel Aguirre-Urreta 
has joined us in the creation of the materials contained 
herein. His work and effort on the Real World Cases and 
blue boxes will be apparent as we bring you new cases 
in every chapter of the book. Please join us in welcoming 
Miguel to our family. 

On behalf of Jim, Miguel, and myself, please accept 
our sincere appreciation for your support and loyalty. As 
always, we hope you enjoy and benefit from this book. 
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The first thing you probably noticed about this new edition is the new, loose-leaf for- 
mat. The 15th edition was produced this way in order to deliver a couple of important 
benefits for instructors and students. 


Lower cost to students—the loose-leaf format allows us to substantially lower the 
price that your campus bookstore pays for each copy, which should translate to a 
substantially lower price for each student. 

Less frequent course prep for faculty—We expect that, by providing students with this 
cost-competitive alternative to a used book, we won’t need to revise the book as fre- 
quently. So instructors will get additional semesters out of their prep with this edition. 
Improved portability—Students and instructors need only carry the chapter re- 
quired for today’s lecture, leaving the rest in a three ring binder. 


If for any reason you need a bound book for your class, simply contact your 
McGraw-Hill representative. They will arrange to have bound copies of Introduction 
to Information Systems, 15th edition produced for your adoption. 


The Fifteenth Edition is designed for business students who are or who will soon become 
business professionals in the fast-changing business world of today. The goal of this text 
is to help business students learn how to use and manage information technologies to 
revitalize business processes, improve business decision making, and gain competitive ad- 
vantage. Thus, it places a major emphasis on up-to-date coverage of the essential role of 
Internet technologies in providing a platform for business, commerce, and collaboration 
processes among all business stakeholders in today’s networked enterprises and global 
markets. This is the business and managerial perspective that this text brings to the study 
of information systems. Of course, as in all O’Brien texts, this edition: 


Loads the text with Real World Cases, in-depth examples (Blue Boxes), and 
opportunities to learn about real people and companies in the business world 
(Real World Activities, Case Study Questions, Discussion Questions, and 
Analysis Exercises). 

Organizes the text around a simple Five-Area Information Systems Framework 
that emphasizes the IS knowledge a business professional needs to know. 

Places a major emphasis on the strategic role of information technology in 
providing business professionals with tools and resources for managing business 
operations, supporting decision making, enabling enterprise collaboration, and 
gaining competitive advantage. 


The text is organized into 


modules that reflect the ated 
five major areas of the Concepts 


framework for informa- Chapters |. 2 
tion systems knowledge. 
Each chapter is then or- 
ganized into two or more 
distinct sections to provide 


the best possible concep- MODULE II MODULE III MODULE IV MODULE V 
i : Information Business Development Management 

tual orgamzanon of the Technologies Applications Processes Challenges 

text and each chapter. This | Chapters 3, 4, 5, 6 Chapters 7, 8, 9 Chapter 10 Chapters 11, 12 


organization increases in- 
structor flexibility in as- 
signing course material because it structures the text into modular levels (i.e., modules, 
chapters, and sections) while reducing the number of chapters that need to be covered. 


An Information 


Systems Framework 


Business Applications 


How businesses use the Internet and other 

information technologies to support 

their business processes, e-business and 

e-commerce initiatives, and business Mana gemen t Challen ges 

decision making (Chapters 7, 8, and 9). The challenges of business/IT technologies 
and strategies, including security and ethi- 
cal challenges and global IT management 
(Chapters 11 and 12). 


Information 
Technologies 


Includes major concepts, develop- 
ments, and managerial issues in- 
volved in computer hardware, 
software, telecommunications net- 
works, data resource management 
technologies, and other technolo- 
gies (Chapters 3, 4, 5, and 6). 


Development Processes 


Developing and implementing business/IT 
strategies and systems using several strategic 


planning and application development | F oundation Conce pts 


approaches (Chapter 10). Fundamental business information systems 
concepts, including trends, components, 
and roles of information systems (Chapter 1) 
and competitive advantage concepts and 
applications (Chapter 2). Selective coverage 
of relevant behavioral, managerial, and 
technical concepts. 


Each chapter provides three Real World Cases—in-depth 
examples that illustrate how prominent businesses and 
organizations have attempted to implement the theoretical 


concepts students have just learned. 


REAL WORLD 


ner 


hen Cogent Communications eyes a compa: 
to acquire, it goes into battle mode. Two mil 


north of the Pentagon, across the Potomac in 
Washington, Cogent sets up what it calls the War Room, 
where it marshals eight top executives to evaluate the target 
company. Among those on the due diligence squad are the 
IS director and IT infrastructuri 
Cogent, a midsize Internet service provider, understands 
what far too many companies don’t: Its ability to integrate 
and, in some cases, adopt an acquired company’s IT systems 


e manager. 


hes 


and operations can determine whether a merger flouri: 
or founders 


For one thing, unanticipated IT integration 
costs can offset merger savings. Imagine the business lost 
when orders vanish, accounts pa 


ble go uncollected, and 
customer information goes AWOL because the acquiring 
company gave short shrift to the IT challenge ahead. 

As 2006 came to acl 


of mergers and acquisitions, but now IT managers have to 


, it broke records for the number 


step up and make sure their data centers can help make those 
deals a reality. “A well-run data center with reduced com- 


plexity makes mergers and acquisitions much easier,” say 
Andi Mann, senior analyst at Enterprise Management Asso- 
ciates (EMA). 


More than 11,700 deals were done. As the dust clears, 
experts and IT managers agree that companies will feel the 
full impact of this merger and acquisition (M&A) frenzy di- 
tly in their data centers. 
prep now or risk experiencing downtime if they have to 


So they advise organizations to 


merge mission-critical assets. “Today, the most downtime 


companies can afford for critical data center infrastructure is 


FIGURE 5.1 


— 


Source: McGraw-Hill Companies, Ine/John Flournoy, photographer. 
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measured in minutes.” Merged and acquired infrastructure 
“has to be available right away,” says Ryan Osborn of AFCOM, 
a data center industry group. 

Observers agree that the key to M&A success from a 
data center perspective is to focus on virtualization, docu- 
mentation, and logistics. Osborn says these three areas will 


help companies get ahead of the game and turn a time of 
crisis into one of opportunity. “You won't spend your time 
just moving infrastructure from one data center to another. 
You can actually do a technology refresh, get newer equip- 


ment and come out ahead,” he ; 

For John Musilli, data center operations manager at Intel 
in Santa Clara, California, the most critical piece is knowing 
about basic logistics. “I don’t always have to know what a 
server does, but I do have to know how to keep it alive,” he 
says. “It’s getting something moved from Point A to Point B 
and it doesn’t matter whether the logistics deals with putting 
servers on a truck or transferring data over a line.” 

Musilli has been through a handful of acquisitions in his 
eight years at Intel, and he says that he has it down to a sı 
ence. “As part of the acquiring company, it’s my job to pro- 
vide the skeletal environment to accept any company’s assets 
that come to us,” he says. As such, he keeps a healthy amount 
of generic racking, generic cabling, extra bandwidth on the 
network, and generic power. “I go generic because I proba- 
bly won't know what servers, how many slots, or what type 
of power we'll need beforehand. With generic, I can config- 
ure whatever I need in minutes,” he says. 

For instance, he uses a universal busway for power so 
that he doesn’t have to be concerned about the particular 
electrical needs of the acquired equipment. “We acquired a 
company and needed to integrate them in a short period of 
time because their building lease was up and they had to get 
out of there,” Musilli says. One team was sent ahead of time 
and spent a year trying to identify each server on 30-40 racks. 
“None of their applications matched our operating systems,” 
he says. As time dwindled, Musilli told them to pack up all 
the servers and send them to him. “In the end, it took two 
man-days to move them intact and get them up and running 
in our data center,” he say 

As companies begin to contemplate future mergers or 
acquisitions, they must look inward at their own processes 
and procedures. “Just as important as technology is docu- 
mentation of processes—you have to know what people are 
doing with the systems,” says EMA’s Mann. He warns that 
one of the first obstacles to having a successful merger or 
acquisition is the reliance on what he refers to as tribal knowl- 
edge. Companies that have data centers where the employees 
hold all the knowledge suffer greatly when, after a merger or 
acquisition, those people are let go. 

“You have to document the knowledge from those peo- 
ple and figure out how to make the processes work with 
only a handful of employees,” he says. Mann recommends 


Real Life Lessons 


Use Your Brain 


Traditional case study questions promote and 
provide opportunity for critical thinking and 
classroom discussion. 
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creating a workflow chart that outlines who’s responsible for 
each part of the data center. He suggests considering who 
handles network management, systems management, appli- 
cation management, and storage. “This will also help you 
spot redundancies in skill sets or areas where you are lacking 
in the event of a merges,” he says. John Burke, senior analyst 
at Nemertes Research jn Minneapolis, says that in addition 
to knowing who is resppnsible, IT groups must know which 
systems perform which|processes. 
“You have to have peally good information about what 
goes on in your data ceter in terms of systems and how they 
interact with each othẹr and how they interface with the 
business. You should always know what services you offer 
and how much it costs {o offer them,” Burke says. As part of 
this effort, many organikations employ a configuration man- 
agement database and asset management tool to help track 
elements within the dafa center. “You need a clear and con- 
cise view of the data flow within the data center. If you don’t 
know what has to move|together, you might disrupt business 
during a merger or acqisition,” he says. 
Companies must also develop guidelines for governance 
to be referenced during a merger. For instance, if two law 
firms are merging and have competing clients, then IT 
groups must ensure that data are protected and there is suf- 
ficient access control. AFCOM’s Osborn says that good doc- 
umentation helps the discovery process that companies go 
through before a merger or acquisition. “If the company you 
are acquiring has good documentation and good processes in 
place, the acquisition gdes much more smoothly,” he says. 
“In some cases, you}might be able to lower your software 
costs if you use a more|robust server with fewer processors, 
but if the application lidense doesn’t allow for that, then you 
can’t,” Osborn says, and adds: “How much money you're 
going to have to spend tp merge technology can weigh heavily 


CASE STUDY QUESTIONS 


1. Place yourself in the role of a manager at a company 
undergoing a merger or acquisition. What would be 
the most important things customers would expect 
from you while still in that process? What role would 
TT play in meeting those expectations? Provide at least 
three examples. 


2. Focus on what Andi Mann in the case calls “tribal 
knowledge.” What do you think he means by that, and 
why is it so important to this process? What strategies 
would you suggest for companies that are faced with the 
extensive presence of this issue in an acquired organiza- 
tion? Develop some specific recommendations. 

3. Most of the discussion on the case focused on hardware 
and software issues. However, these are essentially ena- 
blers for underlying business processes developed by 
each of the companies involved. What different alterna- 
tives do companies have for merging their business 
processes, and what role would IT play in supporting 
those activities? Pay particular attention to data man- 
agement and governance issues. 


on the decision to acquire a company.” Nemertes’ Burke 
suggests that one major step to M&A success is to make sure 
your data center has virtualization tools running on both 
servers and storage. 

Virtualization is important not only for scaling the data 
center but also for creating a standardized execution environ- 
ment. “With a well-virtualized data center, you can hide the 
fact that things are moving around multiple servers and stor- 
age devices,” Burke says. Rob Laurie, CEO at virtualization- 
software provider Dunes Technologies in Stamford, 
Connecticutt, says that virtualization is useful for companies 
that want to test application and infrastructure integration be- 
fore they put their merged or acquired assets into production. 
It’s also helpful for companies that must integrate assets that 
can’t be physically moved, he says. He warns, however, that for 
virtualization to be most effective, merging companies must 
decide on a uniform platform for their virtual environment. 
“That way, whatever is virtualized in one company could run 
in the other company’s data center without problems,” he says. 
If they don’t have the same environment, they must at least 
have a compatible data format to gain any benefit. 

Intel’s Musilli suggests that IT’s natural attention to de- 
tail can sometimes overcomplicate matters. “Mergers and 
acquisitions aren’t always as difficult as people make them. 
They’re simply about the ability to assimilate any two envi- 
ronments,” he says. M&As create stress for both acquirer 
and acquiree, but early involvement by IT can minimize the 
trauma. Otherwise, you’ll need to do too much in too little 
time. As software engineering guru Frederick Brooks once 
said, “You can’t make a baby in a month using nine women. 
Plan ahead.” 


Source: Adapted from Sandra Gittien, “Mergers Go Smoother with a Well- 
Prepped Data Center,” Computerworld, July 28, 2007, and Eric Chabrow, “IT 
Plays Linchpin Role in High-Stake M&As,” InformationWeek, June 26, 2006. 


REAL WORLD ACTIVITIES 


1. The case extensively discusses the idea of “virtualiza- 
tion” and the role it plays in the merger process. Go 
online to research this concept and prepare a report 
about what it entails, how it works, what are its 
advantages and disadvantages, and other applications 
in addition to those noted in the case. 


2. Search the Internet for reports of merger and acquisi- 
tion cases where IT issues played an important role, 
either positive or negative. How did different organiza- 
tions handle IT-related matters in the situations you 
found? What was the ultimate outcome of the process? 
Prepare a presentation to share your findings with 
the class. 


Use Your Hands 


The Real World Activities 
section offers possibilities 
for hands-on exploration 
and learning. 


Chapter 2 focuses on the use of IT as a way to 
surpass your competitor’s performance. 


bs s 
Business information 
Croniatons ( Technologies J 


COMPETING WITH 
INFORMATION TECHNOLOGY 


y 


44 @ Module 1/ Foundation Concept 1. Identify several basic competitive strategies and 
explain how they use information technol 


to confront the competitive forces faced by a 
business. 


-Identify several strategic uses of Internet tech- 
nologies and give examples of how they can help 
a busines 


ain competitive advantages, 


r ’ ` 3. Give examples of how business process reengi- 
Strategic IT Tena is no longer an afterthought in forming business strategy, but the actual cause eine Saale f io me Ersitegie tae ok 
Internet technologies 

This chapter will show you that it is important to view information systems as he Tere Gin cin ao ela GE TS 
more than a set of technologies that support efficient business operations, workgroup pisos Ace F apat 
ess decision making. Information tech- 


the way businesses compete. You should also view information 


nologies to become an agile competitor or form 
a virtual company 


and enterprise collaboration, or effective busi 
nology can chang 


systems strategically, that is, as vital competitive networks, as a means of organiza- 5. Explain how knowledge management systems can 


es help 


help a business gain strategic advantages 


tional renewal, and as a necessary investment in technologies, such technol 
a company adopt strat 
vent itself to survive 


egies and business processes that enable 


to reengine 


nd succeed in today’s dynamic business environment. 
Section I of this chapter introduces fundamental competitive strat 


concepts that 


ction H then discusses several ma- 
y used by many companies today 
Read the Real World Case regarding the competitive advantages of IT. We can 


underlie the strategic use of information systems. S 
jors 


ategic applications of information technol 


learn a lot about the strategic business uses of information technologies from this case 
See Figure 2.1 


apter 1, we emphasized that a major role of information systems applications in 


Competitive hae ye f 

pusiness is to provide effective support of a company’s strat nining competi- 
Strategy tive advantage. This strategic role of information systems involves using information 
Concepts technology to develop products, services, and capabilities that give a company major 


advant 
Lh 


over the competitive forces it faces in the global marketplace. 


43 
Chapter 11 discusses the issues 
surrounding these topics and 
the challenges IT faces. 
ter 11 / Security and Ethical Challenge 455 
REAL WORLD 
hat Bryan found on an executive's computer and professional, throughout the company, and they have the 
six years ago still weighs heavily on his mind. technical prowess to manipulate that information, That gives 
He's particularly troubled that the man he them both the power and responsibility to monitor and re- 
discovered using a company PC to view pornography of port employees who break company rules. IT professionals 
Asian women and of children was subsequently promoted may also uncover evidence that a coworker is, say, embez: 
and moved to China to run a manufacturing plant. “To this _zling funds, or they could be tempted to peek at private salary 
day, I regret not taking that stuff to the FBL” It happened information or personal e-mails. There’ little guidance, 
E FIGURE 11.1 understand them, you're in 


countable,” 


says John Reec 
Revenue Service and Time Y 
guidelines also lets employ 
the person they discover bl 
someone who reports to the| 
Reece, who is now head of cd 
Associates LLC. Organizati 
often focus on areas where | 


#54 @ Module V / Management Challenges 


emphasize whatever they a 
Reece was at the IRS, for ex: 
on protecting the confidenti: 
At the U.S. Department 
phasize procurement rules, 
dent of the SANS Technol 
Ethics Handbook: Right and W 
to the complexity, an organ| 
skilled workers might be nj 
worked in IT security at the 
in Virginia, it was a rarefied 
after PhDs, “I was told pret 
lot of PhDs very unhappy so 


ntroduction ‘There is no question that the use of information technology in business presents major 
es, poses serious ethical questions, and affects society in significant 
ways. Therefore, in this section, we explore the threats to businesses and individual: 
a result of many types of computer crime and unethical behavior. In Section II, we will 
examine a variety of methods that companies use to manage the security and integrity 
of their business systems, Now let’ look at a real-world example 

Read the Real World Case on the next page. We can learn a lot from this case 
about the security and ethical issues that result from the pervasive use of IT in or- 
ganizations and society today. See Figure 11.1 


security challen, 


‘The use of information technologies in business has had a major impact on society and 
thus raises ethical issues in the areas of crime, privacy, individuality, employment, 


health, and working conditions. See Figure 11.2 i 

Iv is important to understand that information technology has had beneficial re- wouldn't need me anyimore, 
sults, as well as detrimental effects, on society and people in each of these areas. For Of course, that wasn’t wl 
example, computerizing a manufacturing process may have the beneficial result of ee Northcutt had to read betw 
improving working conditions and producing products of higher quality at lower cost, preted it was: Child pornogrd 


but it also has the adverse effect of eliminating people's jabs. So your job as a ma if the leading mathematiciai 
or business professional should involve managing your work activities and those of tures of naked girls, they didl 
others to minimize the detrimental effects of business applications of information Source: ©Couresy of Punchstock. Northeutt says that he didl 
technology and optimize their beneficial effects. That would represent an ethically and that both events late pi 


sponsible use of infor 
| 


tion technol 


...and Beyond 


Eaves eae Go Global with IT 


Managing Global IT This text closes with Chapter 12, an in-depth 
bne PEE EEE E E tite ecieie look at IT across borders. 


$ Seoul, companies around the globe are developing new models to operate competitively 

I nternation al in a digital economy. These models are structured, yet agile; global, yet local; and 

Dimension they concentrate on maximizing the risk-adjusted return from both knowledge and 
technology assets. 


International dimensions have become a vital part of managing a business enter- 
prise in the internetworked global economies and markets of today. Whether you be- FIGURE 12.11 
come a manager in a large corporation or the owner of a small business, you will be 
affected by international business developments and deal in some way with people, 
products, or services whose origin is not your home country. 

Read the Real World Case on the next page. We can learn a lot about approaches 
to successfully develop and roll out worldwide system implementations from this 
case. See Figure 12.11. 


Global IT Figure 12.12 illustrates the major dimensions of the job of managing global informa- 
tion technology that we cover in this section, Notice that all global IT activities must 

Management he adjusted to take into account the cultural, political, and geoeconomic challenges 
that exist in the international business community. Developing appropriate business 
and IT strategies for the global marketplace should be the first step in global informa 
tion technology management. Once that is done, end users and IS managers can move 
on to developing the portfolio of business applications needed to support business/IT 
strategies; the hardware, software, and Internet-based technology platforms to sup- 
port those applications, the data resource management methods to provide necessary 
databases; and finally the systems development projects that will produce the global 
information systems required. 


Global Teams: It’s We seem to have reached a point where virtually every CIO is a global CIO—a 


Still a Small World | lader whose sphere of influence (and headaches) spans continents, The global CIO's Consistency across the different business functions, 
‘most common challenge, according to CIO Executive Council members, is manag- countries, languages, and processes involved in world- 
ing global virtual teams. In an ideal world, HR policies across the global IT team implementations is one of the most important 
should be consistent, fair, and responsive. Titles and reporting structures (if not al 

@ compensation) should be equalized. challenges faced by global organizations today. 


‘The council’ European members, representing Royal Dutch Shell, Galderma, 
Olympus, and others, commissioned a globalization playbook that collects and codi- 
fies best practices in this and other globalization challenges. Source: Getty Images. 

Obtain local HR expertise. Companies must have a local HR person in each 
country to deal with local laws. “Hiring, firing, and waining obligations must be 
managed very differently in each location, and you need someone with local exper- 


tise on the laws and processes,” says Michael Pilkington, former CIO of Euroclear, the 
Brussels-based provider of domestic and cross-border settlement for bond, equity, X p a n O u r n O W e g e 


and fund transactions. 
Create job grade consistency across regions. Euroclear is moving toward a 
job evaluation methodology that organizes job types into vertical categories, such as 


a Blue boxes in each chapter provide 

ae brief, in-depth examples of how 
corporations apply IS concepts and 
theories. 


(text continues on page 525) 


Colorcon Inc.: Since Colorcon Inc. consolidated all of its global offices and seven manufacturing 


Benefits and sites onto one ERP system in 2001, the benefits have been indisputable. The spe 

cialty chemicals manufacturer has increased its annual inventory turpis by 40 percen 

Challenges of closes its books each quarter more than 50 percent faster than it dnce did, and haf 

Global ERPs improved its production lead times. “It was a significant improvefnent,” says CIC 
Perry Cozzone. 

Yet getting to a single, global instance has also been fraught Wh challenges fo 

@ the West Point, Pennsylvania—based company. Those included cleansing and verify] 

ing data from legacy systems, standardizing business processes glopally, and gettin 


buy-in from business leaders in locales as disparate as Brazil, Sifgapore, and th 
United Kingdom. 

“Te was hard work,” says Cozzone, who oversaw the final stages of the systen| 
implementation, Transitioning to a single, global instance of an [ERP system is 4 
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the toughest challenge in moving to one ERP system is change management. “It 4 
real struggle for many companies to have consistency around ther business proc 
esses” because of differences in regional business requirements, s 
analyst at Forrester Research Inc. 
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Rethinks the Best | organize data in tables composed of vertical columns and horizontal ro 
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Colorcon Inc.: Since Colorcon Inc. consolidated all of its global offices and seven manufacturing 


Benefits and sites onto one ERP system in 2001, the benefits have been indisputable. The spe} 

cialty chemicals manufacturer has increased its annual inventory turns by 40 percent] 

Challenges of closes its books each quarter more than 50 percent faster than it once did, and ha 
q p 


Global ERPs 


improved its production lead times. “It was a significant improvement,” says CIQ 
Perry Cozzone. 

Yet getting to a single, global instance has also been fraught with challenges fo! 
the West Point, Pennsylvania-based company. Those included cleansing and verify 
ing data from legacy systems, standardizing business processes globally, and getting 
buy-in from business leaders in locales as disparate as Brazil, Singapore, and th 
United Kingdom. 

“Te was hard work,” says Cozzone, who oversaw the final stages of the systen] 
implementation. Transitioning to a single, global instance of an ERP system is 
heady challenge for large and midsize multinationals alike. For many organizations| 
the toughest challenge in moving to one ERP system is change management. “It’s 


Why? Data warehouses frequently store transactional data, and each tra 
has many parts. Columns cut across transactions and store an element of info: 
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esses” because of differences in regional business requirements, says Rob Karel, a1 Ane Wotlewide: a lot of “good advice” coming in from the head office. There was pr 
aie $ $ governance or standardization, Paradoxically, the use of third-party se 
Campus has catalyzed better governance and standards in captive or shared-setvices centers 


scattered in distant parts of the world, 


in India to service its global operations; has outsourced to almost half 
party IT service providers; and itself functions as a human resourc 
administration provider to companies such as General Motors and Novartis. 

There are multiple ways to implement the concept of a worldwide campus. Re- 
gardless of the company having globally dispersed teams working on disparate pieces 
of work, what binds these offices together is a defined, common architecture and a 
shared-enterprise objective. 

Such complexity in operations is nothing new; it has been happening in other 
industries for decades. In manufacturing, for instance, components may be produced 
in China and Taiwan, assembled in Malaysia, and packaged in and shipped from 
China. All of these activities may be coordinated from the United States. “The serv- 
ices industry, and business process outsourcing (BPO) in general, is just starting to 
catch up with its manufacturing brethren,” says Brian Maloney, recently appointed as 
president of the newly formed Unisys Global Industries. Maloney has been CEO of 
AT&T Solutions Q 


Expand Your Horizons 


Globe icons indicate examples with 
an international focus so that your 
knowledge makes you truly worldly. 


The Fifteenth Edition includes significant changes to the Fourteenth Edition’s content 
that update and improve its coverage, many of them suggested by an extensive faculty 
review process. Highlights of key changes for this edition include the following: 


Real World Cases provide current, relevant, and in-depth examples of IS theory 
applications. A combination of Case Study Questions and Real World Activities allows 
you to engage students on a variety of levels. 

More new Real World Cases: More than two-thirds of the cases are new to the 
Fifteenth Edition. These up-to-date cases provide students with in-depth business 
examples of the successes and challenges companies are experiencing in imple- 
menting the information technology concepts covered in each chapter. 

Chapter 3: Computer Hardware includes updated coverage of Moore’s law, in addi- 
tion to increased and updated coverage of information appliances, Grid computing, 
and voice recognition, as well as RFID technology and privacy challenges. 
Chapter 4: Computer Software provides additional information about OpenOffice 
Suite and XML. 

Chapter 5: Data Resource Management expands the discussion on records and 
primary keys. 

Chapter 7: Electronic Business Systems includes a new discussion on the relationship 
between SCM, CRM, and ERP with regard to supporting corporate strategy. 

It also provides an expanded discussion of SCM as a top strategic objective of 
modern enterprises and a new discussion on the use of digital billboards in targeted 
marketing. 

Chapter 8: Electronic Commerce Systems provides increased coverage and discus- 
sion of e-commerce success factors, a new section and discussion of search engine 
optimization, and new data relating to top retail web sites and online sales volume. 
Chapter 9: Decision Support Systems includes an additional discussion with regard to 
the strategic value of business intelligence activities in the modern organization, 
added coverage of CAPTCHA tests to prevent machine intervention in online en- 
vironments, and expanded coverage of both OLAP and the modern use of expert 
system engines. 

Chapter 10: Developing Business/IT Solutions has added coverage of system imple- 
mentation challenges, user resistance, and end-user development, and logical 
versus physical models. 

Chapter 11: Security and Ethical Challenges includes a new section on cyberter- 
rorism. Additionally, it provides updated coverage of software piracy economic 
impacts, increased coverage of HIPAA, and a significant increase in discussion of 
current state of cyber law. 

Chapter 12: Enterprise and Global Management of Information Technology provides 
expanded in-depth coverage of COBIT and IT governance structures in organiza- 
tions as well as an added section on trends in outsourcing and offshoring. 


Student Support 


le Data Resource Management. Data resource manage- 
ment is a managerial activity that applies information 
technology and software tools to the task of managing 
an organization's data resources. Early attempts to 
manage data resources used a file processing approach 
in which data were organized and accessible only in 
specialized files of data records that were designed for 
processing by specific business application programs. 
This approach proved too cumbersome, costly, and 
inflexible to supply the information needed to manage 
modern business processes and organizations. Thus, the 
database management approach was developed to solve 
the problems of file processing systems. 


le Database Management. The database management 
approach affects the storage and processing of data. 

The data needed by different applications are consoli- 

dated and integrated into several common databases in- 


atch one of the key terms and concepts listed previously with one of the brief examples or definitions that follow, Try to find 
e best fit for answers that seem to fit more than one term or concept. Defend your choices. 


distributed, and external databases. Data warehouses 
are a central source of data from other databases that 
have been cleaned, transformed, and cataloged for busi- 
ness analysis and decision support applications. That 
includes data mining, which attempts to find hidden 
patterns and trends in the warehouse data. Hypermedia 
databases on the World Wide Web and on corporate 
intranets and extranets store hyperlinked multimedia 
pages on a Web site. Web server software can manage 
such databases for quick access and maintenance of the 
Web database. 


Data Access. Data must be organized in some logical 
manner on physical storage devices so that they can be 
efficiently processed. For this reason, data are com- 
monly organized into logical data elements such as 
characters, fields, records, files, and databases. Database 
structures, such as the hierarchical, network, relational, 
are used to organize the 

h records stored in data- 

n be organized in either a 
land can be accessed and 
tial access or direct access 


1. The use of integrated collections of data records — 21. Records organized as cubes within cubes in a he development of data- 

and files for data storage and processing. database. hed using microcomputer 
ne a ae ges for small end-user 

2. Data in independent files made it difficult to — 22. Databases that support the major business processes evelopment of large 
provide answers to ad hoc requests and required of an organization. atop down data planae 
T e EA to be written to 23. A centralized and integrated database of current loping enterprise and entity 
perform this tas! and historical data about an organization. area databases, and data 

3. A specialist in charge of the databases of an 24. Databases available on the Internet or provided by _ f dats elements and rela- 
organization, commercial information services. phe operation and manage- 

4. A nonprocedural computer language used to ___.25. A problem in the file processing approach where 


interrogate a database. major components of a system are dependent on 


each other to a large degree. 


i. Defines and catalogs the data elements and data 


relationships in an orgenization’s database. — 26. Different approaches to the logical organization of 
6. A feature of database systems that uses queries or individual data elements stored in a database. 


report generators to extract information. — 27. The most basic logical data element corresponding 


7. The main software package that supports a database to a single letter or number. 


management approach. 28. A feature of distributed databases that identifies 
2 Dasahasasshar anadi d ha lnsannat and — sisone database and then makes appropri- 


in the others. 


Discussion Questions 


1. How should a business store, access, and distribute data 
and information about its internal operations and exter- 
nal environment? 


3. What are the advantages of a database management ap- 
proach to the file processing approach? Give examples 
to illustrate your answer. 


2. What role does database management play in managing 
data as a business resource? 


4. Refer to the Real World Case on Cogent Communica- 
tions, Intel, and Others about IT-related issues in M&A 


Analysis Exe 


Complete the following exercises as individual or group projects that apply chapter concepts to real-world businesses. 


1. Joining Tables Course Table 
You have the responsibility for managing technical 
training classes within your organization. These classes 
fall into two general types: highly technical training and 
end-user training. Software engineers sign up for the 
former, and administrative staff sign up for the latter. 
Your supervisor measures your effectiveness in part 
according to the average cost per training hour and type 
of training. In short, your supervisor expects the best 
training for the least cost. 

‘To meet this need, you have negotiated an exclusive 
on-site training contract with Hands-On Technology 
‘Transfer (HOTT) Inc. (www.traininghott.com), a high- 
quality technical training provider. Your negotiated 
rates are reproduced below in the pricing table. A 
separate table contains a sample list of courses you 
routinely make available for your organization. 


Duration Technical 
ASP Programming 5 Yes 
XML Programming 5 Yes 
PHP Programming 4 Yes 
5 
5 


Course Name 


Microsoft Word-Advanced No 
Microsoft Excel-Advanced No 


2. Training-Cost Management 
Having determined the cost per student for each of the 
classes in the previous problem, you now must carefully 
manage class registration. Because you pay the same 
flat rates no matter how many students attend (up to 
capacity), you want to do all you can to ensure maxi- 
mum attendance. Your training provider, Hands-On 
Technology Transfer Inc., requires two weeks’ notice 
in the event that you need to reschedule a class. You 
should make sure your classes are at least su-thirds 


a. Using these data, design and populate a table that 
includes basic training rate information, Designate 
the “Technical” field type as “Yes/No” (Boolean). 


Each chapter contains complete pedagogical support in the form of: 


e Summary. Revisiting key chapter concepts in a bullet-point summary. 

e Key Terms and Concepts. Using page numbers to reference where terms are 
discussed in the text. 

e Review Quiz. Providing a self-assessment for your students. Great for review 
before an important exam. 

e Discussion Questions. Whether assigned as homework or used for in-class 
discussion, these complex questions will help your students develop critical 
thinking skills. 

e Analysis Exercises. Each innovative scenario presents a business problem and 
asks students to use and test their IS knowledge through analytical, Web-based, 
spreadsheet, and/or database skills. 

e Closing Case Studies. Reinforcing important concepts with prominent examples 
from businesses and organizations. Discussion questions follow each case study. 


XV 


Available to adopting faculty, the Online Learning Center provides one convenient 
place to access the Instructor’s Manual, PowerPoint slides, and videos. 


Instructor’s Manual (IM) 
‘To help ease your teaching burden, each chapter is supported by solutions to Real 
World Case questions, Discussion Questions, and Analysis Exercises. 


Test Bank 

Choose from over 1,200 true/false, multiple-choice, and fill-in-the-blank questions of 
varying levels of difficulty. Complete answers are provided for all test questions. By 
using the EZ ‘Test Computerized Test Bank instructors can design, save, and generate 
custom tests. EZ Test also enables instructors to edit, add, or delete questions from 
the test bank; analyze test results; and organize a database of tests and student results. 


PowerPoint Slides 

A set of visually stimulating PowerPoint slides accompanies each chapter, providing a 
lecture outline and key figures and tables from the text. Slides can be edited to fit the 
needs of your course. 


Videos 


Videos will be downloadable from the instructor side of the OLC. 


Developed by Richard Perle of Loyola Marymount University, these 14 cases allow 
you to add MBA-level analysis to your course. See your McGraw-Hill Irwin sales rep- 
resentative for more information. 


Content for the Fifteenth Edition is available in WebCT, Blackboard, and PageOut 
formats to accommodate virtually any online delivery platform. 


Online Learning Center 


Visit www.mhhe.com/obrien for additional instructor and student resources. 


Use our EZ Test Online to help your 
students prepare to succeed with Apple 
iPod® iQuiz. 


Using our EZ Test Online you can make test and quiz content available for a student's 
Apple iPod®. 

Students must purchase the iQuiz game application from Apple for 99¢ in order to 
use the iQuiz content. It works on fifth-generation iPods and better. 

Instructors only need EZ ‘Test Online to produce iQuiz ready content. Instructors 
take their existing tests and quizzes and export them to a file that can then be made 
available to the student to take as a self-quiz on their iPods. It’s as simple as that. 


xvii 


This student supplement provides animated tutorials and simulated practice of the core 
skills in Microsoft Office 2007 Excel, Access, and PowerPoint, as well as animation of 
47 important computer concepts. 

With MISource’s three-pronged Teach Me-Show Me-Let Me Try approach, 
students of all learning styles can quickly master core MS Office skills—leaving you 
more classroom time to cover more important and more complex topics. 

For those students who need it, MISource for Office 2007 is delivered online at 
www.mhhe.com/misource. 
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Let Me Try 
1, Open the Chart Type dialog box. 


Hide Question 


Students do the clicking with Let 
Me Try, as they complete the 
previously demonstrated task. 


Modifying the Chart Type 
To change the chart type: 


. Select the chart you want 
to change. 


2, Select Chart Type... from 
the Chart menu. 


+ Click the different Chart 
types and click a Chart 
sub-type: to select it. 


+, Click the Press and Hold to 
view Sample button to see 
how your data will appear 

in the chart. 


» Click OK, 


fetme 
iry aqe 


Show Me illustrates the skill 
step by step, click by click, 
with accompanying narration 
to strengthen the learning 
process. 
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and limitations of using the Internet and other information technologies to enable 
electronic business and commerce, as well as enterprise communications and collabo- 
ration in support of the business processes, managerial decision making, and strategic 
advantage of the modern business enterprise. 
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Assurance of Learning Ready 


Many educational institutions today are focused on the notion of assurance of learn- 
ing, an important element of some accreditation standards. Introduction to Information 
Systems is designed specifically to support your assurance of learning initiatives with a 
simple yet powerful solution. 

Each test bank question for Introduction to Information Systems maps to a specific 
chapter learning outcome/objective listed in the text. You can use our test bank soft- 
ware, EZ Test, to query about learning outcomes/objectives that directly relate to the 
learning objectives for your course. You can then use the reporting features of EZ Test 
to aggregate student results in similar fashion, making the collection and presentation 
of assurance of learning data simple and easy. 


AACSB Statement 


McGraw-Hill Companies is a proud corporate member of AACSB International. Rec- 
ognizing the importance and value of AACSB accreditation, the authors of Introduction 
to Information Systems 15e have sought to recognize the curricula guidelines detailed 
in AACSB standards for business accreditation by connecting selected questions in 
Introduction to Information Systems or its test bank with the general knowledge and skill 
guidelines found in the AACSB standards. It is important to note that the statements 
contained in Introduction to Information Systems 15e are provided only as a guide for the 
users of this text. 

The statements contained in Introduction to Information Systems 15e are provided 
only as a guide for the users of this text. The AACSB leaves content coverage and 
assessment clearly within the realm and control of individual schools, the mission of 
the school, and the faculty. The AACSB charges schools with the obligation of do- 
ing assessment against their own content and learning goals. While Introduction to 
Information Systems 15e and its teaching package make no claim of any specific AACSB 
qualification or evaluation, we have, within Introduction to Information Systems 15e, la- 
beled selected questions according to the six general knowledge and skills areas. The 
labels or tags within Introduction to Information Systems 15e are as indicated. There are 
of course many more within the test bank, the text, and the teaching package, which 
might be used as a “standard” for your course. However, the labeled questions are sug- 
gested for your consideration. 


Chapter 1: Foundations of Information Systems in Business 


e eCourier, Cablecom, and Bryan Cave: Delivering Value through Business 
Intelligence 

e JetBlue and the Veterans Administration: The Critical Importance of IT Processes 

e Sew What? Inc.: The Role of Information Technology in Small Business Success 


Chapter 2: Competing with Information Technology 


e IT Leaders: Reinventing IT as a Strategic Business Partner 
e For Companies Both Big and Small: Running a Business on Smartphones 
e Wachovia and Others: Trading Securities at the Speed of Light 


Chapter 3: Computer Hardware 


e IBM, Wachovia, and Paypal: Grid Computing Makes It Easier and Cheaper 
e Apple, Microsoft, IBM and Others: The Touch Screen Comes of Age 
e Kimberly-Clark and Daisy Brands: Secrets to RFID Success 


Chapter 4: Computer Software 


e GE, H.B. Fuller Co., and Others: Successful Implementations of Software-as-a- 
Service 

e Power Distribution and Law Enforcement: Reaping the Benefits of Sharing Data 
Through XML 

e Wolf Peak International: Failure and Success in Application Software for the 
Small-to-Medium Enterprise 


Chapter 5: Data Resource Management 


e Cogent Communications, Intel, and Others: Mergers Go More Smoothly When 
Your Data Are Ready 

e Applebee’s, Travelocity, and Others: Data Mining for Business Decisions 

e Amazon, eBay, and Google: Unlocking and Sharing Business Databases 


Chapter 6: Telecommunications and Networks 


e Starbucks and Others: The Future of Public Wi-Fi 

e Brain Saving Technologies, Inc. and the T-Health Institute: Medicine through 
Videoconferencing 

e Metric & Multistandard Components Corp.: The Business Value of a Secure Self- 
Managed Network for a Small-to-Medium Business 


Chapter 7: e-Business Systems 

e NetSuite Inc., Berlin Packaging, Churchill Downs, and Others: The Secret to 
CRM is in the Data 

e OHSU, Sony, Novartis, and Others: Strategic Information Systems—It’s 
HR’s Turn 

e Perdue Farms and Others: Supply Chain Management Meets the Holiday Season 


Chapter 8: E-Commerce Systems 

e KitchenAid and the Royal Bank of Canada: Do You Let Your Brand Go Online All 
by Itself? 

e LinkedIn, Umbria, Mattel, and Others: Driving the “Buzz” on the Web 

e Entellium, Digg, Peerflix, Zappos, and Jigsaw: Success for Second Movers in 
e-Commerce 
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Chapter 9: Decision Support Systems 


e Hillman Group, Avnet, and Quaker Chemical: Process ‘Transformation through 
Business Intelligence Deployments 

e Goodyear, JEA, OSUMC, and Monsanto: Cool Technologies Driving Competi- 
tive Advantage 

e Harrah’s Entertainment, LendingTree, DeepGreen Financial, and Cisco Systems: 
Successes and Challenges of Automated Decision Making 


Chapter 10: Developing Business/IT Strategies 


e PayPal: Going Global All Languages at a Time 

e Blue Cross and Blue Shield and Others: Understanding the Science behind 
Change 

e Infosys Technologies: The Implementation Challenges of Knowledge Manage- 
ment Initiatives 


Chapter 11: Security and Ethical Challenges 


e Ethics, Moral Dilemmas, and Tough Decisions: The Many Challenges of 
Working in IT 

e Raymond James Financial, BCD Travel, Houston ‘Texans, and Others: Worrying 
about What Goes Out, Not What Comes In 

e Cyber Scams: Four Top Cyber Criminals—Who They Are and What They Do 


Chapter 12: Enterprise and Global Management of 

Information Technology 

e ‘Toyota, Procter & Gamble, Hess Corporation, and Others: Retiring CIOs and the 
Need for Succession Planning 

e Reinsurance Group of America and Fonterra: Going for Unified Global Operations 

e IBM Corporation: Competing Globally by Offshoring IT Workers and Giving 
Away Technology 
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MODULE | k W 


Foundation 
Concepts 


hy study information systems? Why do businesses need information 

technology? What do you need to know about the use and manage- 

ment of information technologies in business? The introductory 
chapters of Module I are designed to answer these fundamental questions about 
the role of information systems in business. 


e Chapter 1: Foundations of Information Systems in Business presents an 
overview of the five basic areas of information systems knowledge needed by 
business professionals, including the conceptual system components and major 
types of information systems. In addition, trends in information systems and an 
overview of the managerial challenges associated with information systems are 
presented. 

e Chapter 2: Competing with Information Technology introduces fundamental 
concepts of competitive advantage through information technology and illus- 
trates major strategic applications of information systems. 


Completing these chapters will prepare you to move on to study chapters 
on information technologies (Module II), business applications (Module IID), 
systems development processes (Module IV), and the management challenges 
of information systems (Module V). 


Business Information 

Applications Technologies 
Foundation 
Concepts 


FOUNDATIONS OF INFORMATION 


SYSTEMS IN BUSINESS 


Section I 
Foundation Concepts: Information Systems 
in Business 


The Real World of Information Systems 


Real World Case: eCourier, Cablecom, and Bryan Cave: 


Delivering Value through Business Intelligence 

The Fundamental Roles of IS in Business 

Trends in Information Systems 

The Role of e-Business in Business 

‘Types of Information Systems 

Managerial Challenges of Information Technology 
Section II 

Foundation Concepts: The Components of 
Information Systems 

System Concepts: A Foundation 


Real World Case: JetBlue and the Veterans 
Administration: The Critical Importance of IT Processes 


Components of an Information System 
Information System Resources 
Information System Activities 
Recognizing Information Systems 


Real World Case: Sew What? Inc.: The Role of 
Information Technology in Small Business Success 


. Understand the concept of a system and how it 


relates to information systems. 


. Explain why knowledge of information systems is 


important for business professionals, and identify 
five areas of information systems knowledge that 
they need. 


. Give examples to illustrate how the business ap- 


plications of information systems can support a 
firm’s business processes, managerial decision 

> 
making, and strategies for competitive advantage. 


. Provide examples of several major types of infor- 


mation systems from your experiences with busi- 
ness organizations in the real world. 


. Identify several challenges that a business man- 


ager might face in managing the successful and 
ethical development and use of information tech- 
nology in a business. 


. Provide examples of the components of real world 


information systems. Illustrate that in an informa- 
tion system, people use hardware, software, data, 
and networks as resources to perform input, pro- 
cessing, output, storage, and control activities that 
transform data resources into information products. 


. Demonstrate familiarity with the myriad of career 


opportunities in information systems. 
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SECTION I 


The Real 
World of 
Information 
Systems 


What Is an 
Information System? 


Foundation Concepts: 
Information Systems in Business 


‘The question of why we need to study information systems and information technology 
has evolved into a moot issue. Information systems have become as integrated into our 
daily business activities as accounting, finance, operations management, marketing, hu- 
man resource management, or any other major business function. Information systems 
and technologies are vital components of successful businesses and organizations—some 
would say they are business imperatives. They thus constitute an essential field of study 
in business administration and management, which is why most business majors include 
a course in information systems. Since you probably intend to be a manager, entrepre- 
neur, or business professional, it is just as important to have a basic understanding of 
information systems as it is to understand any other functional area in business. 

Information technologies, including Internet-based information systems, are play- 
ing vital and expanding roles in business. Information technology can help all kinds of 
businesses improve the efficiency and effectiveness of their business processes, mana- 
gerial decision making, and workgroup collaboration, which strengthens their com- 
petitive positions in rapidly changing marketplaces. This benefit occurs irrespective of 
whether the information technology is used to support product development teams, 
customer support processes, e-commerce transactions, or any other business activity. 
Information technologies and systems are, quite simply, an essential ingredient for 
business success in today’s dynamic global environment. 


Let’s take a moment to bring the real world into our discussion of the importance of 
information systems (IS) and information technology (IT). See Figure 1.1, and read 
the Real World Case about using information technology to better understand and 
satisfy customer needs. 

If we are to understand information systems and their functions, we first need to 
be clear on the concept of a system. In its simplest form, a system is a set of interre- 
lated components, with a clearly defined boundary, working together to achieve a 
common set of objectives. Using this definition, it becomes easy to see that virtually 
everything you can think of is a system, and one system can be made up of other sys- 
tems or be part of a bigger system. We will expand on this concept later in the next 
section, but for now, this definition gives us a good foundation for understanding the 
focus of this textbook: information systems. 


We begin with a simple definition that we can expand upon later in the chapter. An 
information system (IS) can be any organized combination of people, hardware, soft- 
ware, communications networks, data resources, and policies and procedures that 
stores, retrieves, transforms, and disseminates information in an organization. People 
rely on modern information systems to communicate with one another using a variety 
of physical devices (hardware), information processing instructions and procedures 
(software), communications channels (networks), and stored data (data resources). Al- 
though today’s information systems are typically thought of as having something to do 
with computers, we have been using information systems since the dawn of civiliza- 
tion. Even today we make regular use of information systems that have nothing to do 
with a computer. Consider some of the following examples of information systems: 


e Smoke signals for communication were used as early as recorded history and 
can account for the human discovery of fire. The pattern of smoke transmitted 
valuable information to others who were too far to see or hear the sender. 


e Card catalogs in a library are designed to store data about the books in an orga- 
nized manner that allows readers to locate a particular book by its title, author 
name, subject, or a variety of other approaches. 


REAL WORLD 


isitors to the eCourier Web site are greeted with 
the words “How happy are you? Take the eCourier 
happy test today!” Those words and the playful 
purple Web site represent the company’s customer satisfac- 
tion focus. And a key for the company in achieving that happi- 
ness is through its focus on operational business intelligence. 

Business intelligence is moving out of the ivory tower of 
specialized analysts and is being brought to the front lines. 
In the case of eCourier, whose couriers carry 2,000 packages 
around London each day, operational business intelligence 
allows the company to keep real-time tabs on customer sat- 
isfaction. “This is a crucial differentiator in London’s com- 
petitive same-day courier market, where clients are far more 
likely to take their business elsewhere than they are to report 
a problem to their current courier,” says the company’s chief 
technology officer and cofounder Jay Bregman. 

Online directory London Online alone shows about 350 
listings for courier services. 

Before implementing operational business intelligence, 
eCourier sought to define IT as a crucial differentiator. Co- 
founders ‘Tom Allason, eCourier’s CEO, and Bregman ditched 
the idea of phone dispatchers and instead gave their couriers 
GPS-enabled handhelds so that couriers can be tracked and 
orders can be communicated electronically. They also focused 
on making online booking easy and rewarding; and much was 
invested in user-friendly applications: Customers can track 
online exactly where their courier is, eliminating the package 
delivery guesswork. 

Today, 95 percent of deliveries are booked online, 
meaning that eCourier needs a much smaller staff for mon- 
itoring, tracking, and placing orders, which in turn makes 
the company more scalable. Bregman says this is notable in 


FIGURE 1.1 


Access to quality information about customers helps 
companies succeed at delivering value to shareholders. 


Source: © Digital Vision/Alamy. 
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eCourier, Cablecom, and Bryan Cave: 
Delivering Value through Business 
Intelligence 


a market where many courier companies use telephone dis- 
patchers and guesswork about package whereabouts. Book- 
ing and tracking automation—while innovative—did not 
complete the customer happiness puzzle. Without leading- 
edge business intelligence, account managers could miss 
the same issues that plagued other courier services—late 
deliveries, surly couriers, or even an unnoticed ramp-up in 
deliveries. “We’re only one delivery away from someone 
deciding to use a different delivery firm,” says Bregman. 

So eCourier started using software from a company called 
SeeWhy to try and generate customer data more quickly. 
“What’s unique about SeeWhy,” says Bregman, “is its ability to 
report whats happening with customers instantly.” When a 
new booking enters eCourier’s database, the information is du- 
plicated and saved into a repository within SeeWhy. The soft- 
ware then interprets the data by comparing it with previous 
information and trends, and if it notices an anomaly, it takes 
action. If a customer typically places an eCourier order every 
‘Thursday morning between 9:30 and 10:00 and there’s been 
no contact during that time, eCourier’s CRM team will receive 
an alert shortly after 10:00 that includes the client’s history and 
the number of bookings it typically places in a day. Bregman 
says there’s a fair amount of tuning to get the metrics right. For 
example, the company had to tweak the system to recognize 
expected shifts in activity so that it doesn’t send a slew of alerts 
once the after-Christmas drop in business occurs. Getting that 
perfect balance of when to send alerts and how best to opti- 
mize the system is an ongoing process, he says. 

‘The SeeWhy software is designed to establish a “normal” 
client booking pattern from the first use, which is deepened 
with each subsequent booking. A sharp drop-off in bookings, 
an increase in bookings, or a change in dormant account ac- 
tivity generates an alert that is sent to that client’s account 
manager, who then uses the opportunity to problem-solve or, 
in the case of increased activity, upsell, for example, to over- 
night or international services. “These capabilities have pro- 
vided a big payoff,” says Bregman. He also believes the system 
saves his company the expense of having to hire people to 
monitor for “who’s happy and who’s not—we’re able to do a 
lot more on our customer team with a lot less.” 

There are other approaches to judging customer dissatis- 
faction, however. Cablecom, a Swiss telecom company, used 
SPSS’s statistical software to mine customer data, primarily 
from trouble tickets—such as the average duration of a ticket, 
or how many tickets had been opened for a customer over a 
specific time period—to build a model that could flag when a 
customer was at a high risk of leaving. “But the model proved 
to be only about 70% accurate,” says Federico Cesconi, di- 
rector of customer insight and retention. 

So Cesconi used SPSS’s Dimensions survey research 
software to create an online customer survey, and from that 
he was able to determine that customer dissatisfaction usu- 
ally begins around the ninth month of service, with the bulk 
of the customer losses occurring between months 12 and 14. 
Cesconi then created another survey that he now offers to 
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customers in the seventh month of service, and which in- 
cludes an area where they can type in specific complaints and 
problems. “Cablecom calls customers within 24 hours of 
completing the survey,” says Cesconi. “The two approaches 
together provide the best view of customers ready to bolt, 
and the best chance at retaining them.” 

In 2002, global law firm Bryan Cave faced the million- 
dollar question: How do you make the most money with 
your resources while simultaneously delivering the highest 
customer value? The problem was pressing. Clients of the 
firm, which now has 800 lawyers in 15 offices worldwide, 
were demanding alternatives to the traditional hourly fee 
structure. They wanted new models such as fixed pricing 
and pricing that was adjusted during a project. 

But making money off these new billing strategies re- 
quired the complicated balance of staffing and pricing. 

Projects weighted too heavily with a law partner’s time 
would be expensive (for the law firm) and not optimized for 
profit. Devoting too little of a partner’s time would leave cli- 
ents feeling undervalued. Optimizing profit and perceived 
value had to be achieved by spreading partners’ time through- 
out a number of cases and balancing the remaining resources 
needed for a case with the less-expensive fees of associates and 
paralegals. “Clients are most likely to stay with you if you de- 
liver just the right mix,” says Bryan Cave’s CIO John Alber. 

The law firm’s traditional method of analyzing collected 
fees and profit used a spreadsheet that was complicated and 
took too long. “Spreadsheets provide a level of detail that can 
be valuable for analysts,” says Alber, “but the information in a 
spreadsheet can be confusing and difficult to work with.” Alber 
says he decided it was better to build an easy-to-understand 
interface using business intelligence tools; although the com- 
pany will not release specific figures, Alber says since the com- 
pany implemented its first BI tool in 2004, both profitability 
and hours leveraged—the hours worked by equity partners and 
all other fee earners at the firm—have increased substantially. 

The tools also allow lawyers to track budgets in real time 
so that they can quickly make adjustments. The BI tools 


CASE STUDY QUESTIONS 


1. How do information technologies contribute to the busi- 
ness success of the companies depicted in the case? Pro- 
vide an example from each company explaining how the 
technology implemented led to improved performance. 


2. In the case of law firm Bryan Cave discussed above, the 
use of BI technology to improve the availability, access, 
and presentation of existing information allowed them to 
provide tailored and innovative services to their custom- 
ers. What other professions could benefit from a similar 
use of these technologies, and how? Develop two differ- 
ent possibilities. 


3. Cablecom developed a prediction model to better identify 
those customers at risk of switching to other company in 
the near future. In addition to those noted in the case, 
what other actions could be taken if that information 
were available? Give some examples of these. Would you 

consider letting some customers leave anyway? Why? 


even provide a diversity dashboard, which tracks the hourly 
mix of women and minorities working on the firm’s cases, a 
feature the company will license to Redwood Analytics for 
sale to other law firms. The firm developed this diversity 
tool to bring transparency to the diversity reporting process 
required by many clients. In other words, the tools provide 
Bryan Cave with a method of customizing its fees and help- 
ing clients better understand what they get for their money. 

As an illustration, Alber points to the customized pric- 
ing one lawyer gave to his real estate client. “Developers 
think in terms of square feet,” says Alber, “and this client 
couldn’t understand why legal fees for a 400,000-square- 
foot building might be the same as for a 4,000-square-foot 
building, though it required the same amount of the law- 
yer’s time.” So the lawyer used the pricing and staffing 
modeling tools and historical analysis tools to determine 
whether it made sense for the law firm to charge clients 
based on the size of their projects. 

He found that while there was risk of underpricing large 
buildings, the deal volume in small buildings offset that risk for 
the law firm. The result made per-square-foot pricing possible. 

“It may be possible that someone with enough willpower 
or manpower could do that using traditional analysis,” says 
Alber, “but this lawyer had the information right at his fin- 
gertips.” Business intelligence enables “us to be in touch 
with clients and shift things around in response to what cus- 
tomers are asking,” says Alber. Adopting new and improved 
project management, pricing, and customer service capabili- 
ties required planning, appropriate pacing, and user buy-in. 

“In today’s environment, you can’t do value innovation 
without being in touch with the economics of your business, 
without really understanding where you make money and 
where you don’t, and that’s what business intelligence tools 
do,” says Alber. “Our goal,” he says, “is to build the best 
long-term relationships in the world.” 


Source: Adapted from Diann Daniel, “Delivering Customer Happiness 
Through Operational Business Intelligence,” CIO Magazine, December 6, 
2007; Diann Daniel, “How a Global Law Firm Used Business Intelligence to 
Fix Customer Billing Woes,” CIO Magazine, January 8, 2008; and Mary Weier, 
“Dear Customer: Please Don’t Leave,” InformationWeek, June 18, 2007. 


REAL WORLD ACTIVITIES 


1. Use the Internet to research the latest offerings in 
business intelligence technologies and their uses by 
companies. What differences can you find with those 
reviewed in the case? Prepare a report to summarize 
your findings and highlight new and innovative uses of 
these technologies. 


2. Why do some companies in a given industry, like 
eCourier above, adopt and deploy innovative technol- 
ogies while others in the same line of business do not? 
Break into small groups with your classmates to dis- 
cuss what characteristics of companies could influence 
their decision to innovate with the use of information 
technologies. 


FIGURE 1.2 


A framework that outlines 
the major areas of 
information systems 
knowledge needed by 
business professionals. 
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e Your book bag, day planner, notebooks, and file folders are all part of an in- 
formation system designed to help you organize the inputs provided to you via 
handouts, lectures, presentations, and discussions. They also help you process 
these inputs into useful outputs: homework and good exam grades. 


e The cash register at your favorite fast-food restaurant is part of a large infor- 
mation system that tracks the products sold, the time of a sale, inventory levels, 
and the amount of money in the cash drawer; it also contributes to the analysis of 
product sales in any combination of locations anywhere in the world. 


e A paper-based accounting ledger as used before the advent of computer-based 
accounting systems is an iconic example of an information system. Businesses 
used this type of system for centuries to record the daily transactions and to keep 
a record of the balances in their various business and customer accounts. 


Figure 1.2 illustrates a useful conceptual framework that organizes the knowledge 
presented in this text and outlines areas of knowledge you need about information 
systems. It emphasizes that you should concentrate your efforts in the following five 
areas of IS knowledge: 


e Foundation Concepts. Fundamental behavioral, technical, business, and mana- 
gerial concepts about the components and roles of information systems. Exam- 
ples include basic information system concepts derived from general systems 
theory or competitive strategy concepts used to develop business applications of 
information technology for competitive advantage. Chapters 1 and 2 and other 
chapters of the text support this area of IS knowledge. 


e Information Technologies. Major concepts, developments, and management issues 
in information technology—that is, hardware, software, networks, data management, 
and many Internet-based technologies. Chapters 3 and 4 provide an overview of 
computer hardware and software technologies, and Chapters 5 and 6 cover key data 
resource management and telecommunications network technologies for business. 


e Business Applications. The major uses of information systems for the opera- 
tions, management, and competitive advantage of a business. Chapter 7 covers 
applications of information technology in functional areas of business such as 
marketing, manufacturing, and accounting. Chapter 8 focuses on e-commerce 
applications that most companies use to buy and sell products on the Internet, 
and Chapter 9 covers the use of information systems and technologies to support 
decision making in business. 


e Development Processes. How business professionals and information specialists 
plan, develop, and implement information systems to meet business opportunities. 
Several developmental methodologies are explored in Chapter 10, including the 
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FIGURE 1.3 
The three fundamental 
roles of the business 


applications of information 


systems. Information 
systems provide an 


organization with support 
for business processes and 


operations, decision 
making, and competitive 
advantage. 
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systems development life cycle and prototyping approaches to business application 
development. 


e Management Challenges. The challenges of effectively and ethically managing 
information technology at the end-user, enterprise, and global levels of a busi- 
ness. Thus, Chapter 11 focuses on security challenges and security management 
issues in the use of information technology, while Chapter 12 covers some of the 
key methods business managers can use to manage the information systems func- 
tion in a company with global business operations. 


While there are a seemingly endless number of software applications, there are three fun- 
damental reasons for all business applications of information technology. They are found 
in the three vital roles that information systems can perform for a business enterprise: 


e Support of business processes and operations. 
e Support of decision making by employees and managers. 


e Support of strategies for competitive advantage. 


Figure 1.3 illustrates how the fundamental roles interact in a typical organization. 
At any moment, information systems designed to support business processes and op- 
erations may also be providing data to, or accepting data from, systems focused on 
business decision making or achieving competitive advantage. The same is true for the 
other two fundamental roles of IS. Today’s organizations are constantly striving to 
achieve integration of their systems to allow information to flow freely through them, 
which adds even greater flexibility and business support than any of the individual 
system roles could provide. 

Let’s look at a typical retail store as a good example of how these roles of IS in busi- 
ness can be implemented. 


Support of Business Processes and Operations. As a consumer, you regularly encoun- 
ter information systems that support the business processes and operations at the 
many retail stores where you shop. For example, most retail stores now use computer- 
based information systems to help their employees record customer purchases, 
keep track of inventory, pay employees, buy new merchandise, and evaluate sales 
trends. Store operations would grind to a halt without the support of such informa- 
tion systems. 

Support of Business Decision Making. Information systems also help store man- 
agers and other business professionals make better decisions. For example, decisions 
about what lines of merchandise need to be added or discontinued and what kind of 
investments they require are typically made after an analysis provided by computer- 


Welch’s: Balancing 
Truckloads with 
Business 
Intelligence 
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based information systems. This function not only supports the decision making of 
store managers, buyers, and others, but also helps them look for ways to gain an ad- 
vantage over other retailers in the competition for customers. 

Support of Strategies for Competitive Advantage. Gaining a strategic advantage 
over competitors requires the innovative application of information technologies. 
For example, store management might make a decision to install touch-screen kiosks 
in all stores, with links to the e-commerce Web site for online shopping. This offer- 
ing might attract new customers and build customer loyalty because of the ease of 
shopping and buying merchandise provided by such information systems. Thus, 
strategic information systems can help provide products and services that give a busi- 
ness a comparative advantage over its competitors. 


Given dramatic fluctuations in gas prices, it’s no surprise that companies want to find 
ways to rein in transportation costs. One company finding success in that endeavor is 
Welch’s, a well-known purveyor of food and packaged consumer goods. The com- 
pany is tapping the power of business intelligence for better insight into its supply- 
chain operations, which in turn can help keep transportation expenses lower. Welch’s, 
the $654 million manufacturer known for its jams, jellies, and juices, recently in- 
stalled an on-demand BI application from Oco. 

One way Welch’s is leveraging the Oco BI application is to ensure truckloads 
delivered by its carriers go out full. 

The idea is that customers are already paying for the full truck when it delivers 
goods, even if it’s only halfway or three-quarters loaded. With the BI system, Welch’s 
can tell if a buyer’s shipment is coming up short of full capacity and help them figure 
out what else they can order to max it out, thus saving on future shipping costs. 

“Welch’s can go to the customer and say, ‘You’re only ordering this much. Why 
not round out the load with other things you need? It will be a lot cheaper for you,” 
says Bill Copacino, president and CEO of Oco. “If you’re able to put 4,000 more 
pounds on the 36,000-pound shipment, you’re getting a 10 percent discount on 
transportation costs,” he adds. 

“We're essentially capturing every element—from the customer orders we re- 
ceive, to bills of lading on every shipment we make, as well as every data element on 
every freight bill we pay,” says Bill Coyne, director of purchasing and logistics for 
Welch’s. “We dump them all into one data warehouse [maintained by Oco], and we 
can mix-and-match and slice-and-dice any way we want.” Coyne says that Welch’s 
tries to ship its products five days a week out of its distribution center. “But we found 
ourselves just totally overwhelmed on Fridays,” he says. “We would complain, ‘How 
come there are so many orders on Friday?” 

Now, the new system helps Welch’s balance its daily deliveries so that it uses ap- 
proximately the same number of trucks, rather than hiring for seven trucks on a 
Monday, five on a Tuesday, eight on a Wednesday, and so forth. 

‘The company reaps transportation savings by using a stable number of trucks 
daily—“as capacity is not jumping all over the place,” Copacino says. 

“We are gaining greater visibility into cost-savings opportunities, which is espe- 
cially important in light of rising fuel and transportation costs,” says Coyne. Welch’s 
spends more than $50 million each year on transportation expenses, and the 
Oco BI application and reporting features have become critical in a very short pe- 
riod of time. “We literally can’t go any amount of time without knowing this stuff,” 
Coyne says. 


Source: Adapted from Ted Samson, “Welch’s Leverages BI to Reduce Transport Costs,” InfoWorld, October 16, 2008; 
and Thomas Wailgum, “Business Intelligence and On-Demand: The Perfect Marriage?” CIO Magazine, March 27, 2008. 
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Trends in 
Information 
Systems 


FIGURE 1.4 


The expanding roles of the 
business applications of 
information systems. Note 
how the roles of computer- 
based information systems 
have expanded over time. 
Also, note the impact of 
these changes on the end 
users and managers of an 
organization. 


The business applications of information systems have expanded significantly over the 
years. Figure 1.4 summarizes these changes. 

Until the 1960s, the role of most information systems was simple: transaction 
processing, record keeping, accounting, and other electronic data processing (EDP) ap- 
plications. Then another role was added, namely, the processing of all these data into 
useful, informative reports. Thus, the concept of management information systems (MIS) 
was born. This new role focused on developing business applications that provided 
managerial end users with predefined management reports that would give managers 
the information they needed for decision-making purposes. 

By the 1970s, it was evident that the prespecified information products produced 
by such management information systems were not adequately meeting the decision- 
making needs of management, so the concept of decision support systems (DSS) was 
born. The new role for information systems was to provide managerial end users with 
ad hoc, interactive support of their decision-making processes. This support would be 
tailored to the unique decisions and decision-making styles of managers as they con- 
fronted specific types of problems in the real world. 

In the 1980s, several new roles for information systems appeared. First, the rapid 
development of microcomputer processing power, application software packages, and 
telecommunications networks gave birth to the phenomenon of end-user computing. 
End users could now use their own computing resources to support their job require- 
ments instead of waiting for the indirect support of centralized corporate information 
services departments. 


Enterprise Resource Planning and Business Intelligence: 2000s—2010s 


Enterprisewide common-interface applications data mining and data 
visualization, customer relationship management, supply-chain management 


Electronic Business and Commerce: 1990s—2000s 
Internet-based e-business and e-commerce systems 


Web-enabled enterprise and global e-business operations and electronic 
= commerce on the Internet, intranets, extranets, and other networks 


Strategic and End-User Support: 1980s—1990s 
End-user computing systems 
Direct computing support for end-user productivity and workgroup collaboration 
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Second, it became evident that most top corporate executives did not directly use 
either the reports of management information systems or the analytical modeling ca- 
pabilities of decision support systems, so the concept of executive information systems 
(EIS) developed. These information systems were created to give top executives an 
easy way to get the critical information they wanted, when they wanted it, and tailored 
to the formats they preferred. 

Third, breakthroughs occurred in the development and application of artificial 
intelligence (AI) techniques to business information systems. Today’s systems include 
intelligent software agents that can be programmed and deployed inside a system to 
act on behalf of their owner, system functions that can adapt themselves on the basis 
of the immediate needs of the user, virtual reality applications, advanced robotics, 
natural language processing, and a variety of applications for which artificial intelli- 
gence can replace the need for human intervention, thus freeing up knowledge work- 
ers for more complex tasks. Expert systems (ES) and other knowledge-based systems also 
forged a new role for information systems. Today, expert systems can serve as consult- 
ants to users by providing expert advice in limited subject areas. 

An important new role for information systems appeared in the 1980s and contin- 
ued through the 1990s: the concept of a strategic role for information systems, some- 
times called strategic information systems (SIS). In this concept, information technology 
becomes an integral component of business processes, products, and services that help 
a company gain a competitive advantage in the global marketplace. 

‘The mid- to late 1990s saw the revolutionary emergence of enterprise resource plan- 
ning (ERP) systems. This organization-specific form of a strategic information system 
integrates all facets of a firm, including its planning, manufacturing, sales, resource 
management, customer relations, inventory control, order tracking, financial manage- 
ment, human resources, and marketing—virtually every business function. The pri- 
mary advantage of these ERP systems lies in their common interface for all 
computer-based organizational functions and their tight integration and data sharing, 
necessary for flexible strategic decision making. We explore ERP and its associated 
functions in greater detail in Chapter 8. 

We are also entering an era where a fundamental role for IS is business intelligence 
(BI). BI refers to all applications and technologies in the organization that are fo- 
cused on the gathering and analysis of data and information that can be used to drive 
strategic business decisions. Through the use of BI technologies and processes, or- 
ganizations can gain valuable insight into the key elements and factors—both internal 
and external—that affect their business and competitiveness in the marketplace. BI 
relies on sophisticated metrics and analytics to “see into the data” and find relation- 
ships and opportunities that can be turned into profits. We’ll look closer at BI in 
Chapter 9. 

Finally, the rapid growth of the Internet, intranets, extranets, and other inter- 
connected global networks in the 1990s dramatically changed the capabilities of in- 
formation systems in business at the beginning of the 21st century. Further, a 
fundamental shift in the role of information systems occurred. Internet-based and 
Web-enabled enterprises and global e-business and e-commerce systems are becom- 
ing commonplace in the operations and management of today’s business enterprises. 
Information systems is now solidly entrenched as a strategic resource in the modern 
organization. 

A closer look at Figure 1.4 suggests that though we have expanded our abilities 
with regard to using information systems for conducting business, today’s information 
systems are still doing the same basic things that they began doing more than 50 years 
ago. We still need to process transactions, keep records, provide management with 
useful and informative reports, and support the foundational accounting systems and 
processes of the organization. What has changed, however, is that we now enjoy a 
much higher level of integration of system functions across applications, greater con- 
nectivity across both similar and dissimilar system components, and the ability to 
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FIGURE 1.5 
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extranets to implement and 
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e-business applications. 
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reallocate critical computing tasks such as data storage, processing, and presentation 
to take maximum advantage of business and strategic opportunities. Because of these 
increased capabilities, the systems of tomorrow will be focused on increasing both the 
speed and reach of our systems to provide even tighter integration, combined with 
greater flexibility. 


The Internet and related technologies and applications have changed the ways busi- 
nesses operate and people work, as well as how information systems support business 
processes, decision making, and competitive advantage. Thus, many businesses today 
are using Internet technologies to Web-enable their business processes and create in- 
novative e-business applications. See Figure 1.5. 

In this text, we define e-business as the use of Internet technologies to work and 
empower business processes, e-commerce, and enterprise collaboration within a com- 
pany and with its customers, suppliers, and other business stakeholders. In essence, 
e-business can be more generally considered an online exchange of value. Any online ex- 
change of information, money, resources, services, or any combination thereof falls un- 
der the e-business umbrella. The Internet and Internet-like networks—those inside the 
enterprise (intranet) and between an enterprise and its trading partners (extranet)— 
have become the primary information technology infrastructure that supports the e- 
business applications of many companies. These companies rely on e-business 
applications to (1) reengineer internal business processes, (2) implement e-commerce 
systems with their customers and suppliers, and (3) promote enterprise collaboration 
among business teams and workgroups. 

Enterprise collaboration systems involve the use of software tools to support com- 
munication, coordination, and collaboration among the members of networked teams 
and workgroups. A business may use intranets, the Internet, extranets, and other net- 
works to implement such systems. For example, employees and external consultants 
may form a virtual team that uses a corporate intranet and the Internet for e-mail, 
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FIGURE 1.6 Operations and management classifications of information systems. Note how this conceptual overview 
emphasizes the main purposes of information systems that support business operations and managerial decision making. 
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videoconferencing, e-discussion groups, and Web pages of work-in-progress informa- 
tion to collaborate on business projects. 

E-commerce is the buying, selling, marketing, and servicing of products, services, 
and information over a variety of computer networks. Many businesses now use the 
Internet, intranets, extranets, and other networks to support every step of the com- 
mercial process, including everything from advertising, sales, and customer support 
on the World Wide Web to Internet security and payment mechanisms that ensure 
completion of delivery and payment processes. For example, e-commerce systems in- 
clude Internet Web sites for online sales, extranet access to inventory databases by 
large customers, and the use of corporate intranets by sales reps to access customer 
records for customer relationship management. 


Type s of Conceptually, the applications of information systems that are implemented in today’s 

Information business world can be classified in several different ways. For example, several types of 
information systems can be classified as either operations or management information 

Syste ms systems. Figure 1.6 illustrates this conceptual classification of information systems ap- 
plications. Information systems are categorized this way to spotlight the major roles 
each plays in the operations and management of a business. Let’s look briefly at some 
examples of such information systems categories. 


Operations Support Information systems have always been needed to process data generated by, and used 

Systems in, business operations. Such operations support systems produce a variety of infor- 
mation products for internal and external use; however, they do not emphasize the 
specific information products that can best be used by managers. Further processing 
by management information systems is usually required. The role of a business firm’s 
operations support systems is to process business transactions, control industrial proc- 
esses, support enterprise communications and collaborations, and update corporate 
databases efficiently. See Figure 1.7. 
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FIGURE 1.7 A summary of operations support systems with examples. 


Operations Support Systems 


e Transaction processing systems. Process data resulting from business transactions, update operational databases, and 
produce business documents. Examples: sales and inventory processing and accounting systems. 


e Process control systems. Monitor and control industrial processes. Examples: petroleum refining, power generation, 
and steel production systems. 


e Enterprise collaboration systems. Support team, workgroup, and enterprise communications and collaborations. 
Examples: e-mail, chat, and videoconferencing groupware systems. 


Transaction processing systems are important examples of operations support 
systems that record and process the data resulting from business transactions. They 
process transactions in two basic ways. In batch processing, transactions data are ac- 
cumulated over a period of time and processed periodically. In real-time (or online) 
processing, data are processed immediately after a transaction occurs. For example, 
point-of-sale (POS) systems at many retail stores use electronic cash register termi- 
nals to capture and transmit sales data electronically over telecommunications links 
to regional computer centers for immediate (real-time) or nightly (batch) process- 
ing. Figure 1.8 is an example of software that automates accounting transaction 
processing. 

Process control systems monitor and control physical processes. For example, a 
petroleum refinery uses electronic sensors linked to computers to monitor chemical 
processes continually and make instant (real-time) adjustments that control the refin- 
ery process. Enterprise collaboration systems enhance team and workgroup communi- 
cations and productivity and include applications that are sometimes called office 
automation systems. For example, knowledge workers in a project team may use e-mail 
to send and receive e-messages or use videoconferencing to hold electronic meetings 
to coordinate their activities. 


Management When information system applications focus on providing information and support 

Support Systems for effective decision making by managers, they are called management support 
systems. Providing information and support for decision making by all types of man- 
agers and business professionals is a complex task. Conceptually, several major types of 
information systems support a variety of decision-making responsibilities: (1) manage- 
ment information systems, (2) decision support systems, and (3) executive information 
systems. See Figure 1.9. 


FIGURE 1.8 


QuickBooks is a popular 
accounting package that 
automates small office or 
home office (SOHO) 
accounting transaction 
processing while providing 
business owners with 
management reports. 


Source: Courtesy of Quickbooks. 
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FIGURE 1.9 A summary of management support systems with examples. 


Management Support Systems 


e Management information systems. Provide information in the form of prespecified reports and displays to support 
business decision making. Examples: sales analysis, production performance, and cost trend reporting systems. 


e Decision support systems. Provide interactive ad hoc support for the decision-making processes of managers and 
other business professionals. Examples: product pricing, profitability forecasting, and risk analysis systems. 


e Executive information systems. Provide critical information from MIS, DSS, and other sources tailored to the 
information needs of executives. Examples: systems for easy access to analyses of business performance, actions of 
competitors, and economic developments to support strategic planning. 


FIGURE 1.10 


Management information 
systems provide information 
to business professionals in 
a variety of easy-to-use 
formats. 


Management information systems (MIS) provide information in the form of 
reports and displays to managers and many business professionals. For example, 
sales managers may use their networked computers and Web browsers to receive 
instantaneous displays about the sales results of their products and access their cor- 
porate intranet for daily sales analysis reports that evaluate sales made by each 
salesperson. Decision support systems (DSS) give direct computer support to 
managers during the decision-making process. For example, an advertising man- 
ager may use a DSS to perform a what-if analysis as part of the decision to deter- 
mine how to spend advertising dollars. A production manager may use a DSS to 
decide how much product to manufacture, based on the expected sales associated 
with a future promotion and the location and availability of the raw materials nec- 
essary to manufacture the product. Executive information systems (EIS) provide 
critical information from a wide variety of internal and external sources in easy-to- 
use displays to executives and managers. For example, top executives may use 
touch-screen terminals to view instantly text and graphics displays that highlight 
key areas of organizational and competitive performance. Figure 1.10 is an example 
of an MIS report display. 
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FIGURE 1.11 A summary of other categories of information systems with examples. 


Other Categories of Information Systems 


Expert systems. Knowledge-based systems that provide expert advice and act as expert consultants to users. Examples: 
credit application advisor, process monitor, and diagnostic maintenance systems. 


Knowledge management systems. Knowledge-based systems that support the creation, organization, and dissemina- 
tion of business knowledge within the enterprise. Examples: intranet access to best business practices, sales proposal 
strategies, and customer problem resolution systems. 


Strategic information systems. Support operations or management processes that provide a firm with strategic products, 
services, and capabilities for competitive advantage. Examples: online stock trading, shipment tracking, and e-commerce 
Web systems. 


Functional business systems. Support a variety of operational and managerial applications of the basic business func- 
tions of a company. Examples: information systems that support applications in accounting, finance, marketing, opera- 
tions management, and human resource management. 


Other Classifications Several other categories of information systems can support either operations or 
of Information management applications. For example, expert systems can provide expert advice for 
Systems operational chores like equipment diagnostics or managerial decisions such as loan 


portfolio management. Knowledge management systems are knowledge-based 
information systems that support the creation, organization, and dissemination of 
business knowledge to employees and managers throughout a company. Information 
systems that focus on operational and managerial applications in support of basic busi- 
ness functions such as accounting or marketing are known as functional business 
systems. Finally, strategic information systems apply information technology to a 
firm’s products, services, or business processes to help it gain a strategic advantage 
over its competitors. See Figure 1.11. 

It is also important to realize that business applications of information systems in 
the real world are typically integrated combinations of the several types of informa- 
tion systems just mentioned. That is because conceptual classifications of informa- 
tion systems are designed to emphasize the many different roles of information 
systems. In practice, these roles are combined into integrated or cross-functional 
informational systems that provide a variety of functions. Thus, most information 
systems are designed to produce information and support decision making for vari- 
ous levels of management and business functions, as well as perform record-keeping 
and transaction-processing chores. Whenever you analyze an information system, 
you probably see that it provides information for a variety of managerial levels and 
business functions. 


Man ageri al Figure 1.12 illustrates the scope of the challenges and opportunities facing business 
Challenges of managers and professionals in effectively managing information systems and technol- 

g! ogies. Success in today’s dynamic business environment depends heavily on maximiz- 
Information ing the use of Internet-based technologies and Web-enabled information systems to 
Technol ogy meet the competitive requirements of customers, suppliers, and other business part- 


ners in a global marketplace. Figure 1.12 also emphasizes that information systems 
and their technologies must be managed to support the business strategies, business 
processes, and organizational structures and culture of a business enterprise. That is 
because computer-based information systems, though heavily dependent on informa- 
tion technologies, are designed, operated, and used by people in a variety of organiza- 
tional settings and business environments. The goal of many companies today is to 
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FIGURE 1.12 Examples of the challenges and opportunities that business managers face in managing information 


systems and technologies to meet business goals. 
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their employees implement cooperative business processes with customers, suppliers, 
and others. 


By now you should be able to see that the success of an information system should not 
be measured only by its efficiency in terms of minimizing costs, time, and the use of 
information resources. Success should also be measured by the effectiveness of the in- 
formation technology in supporting an organization’s business strategies, enabling its 
business processes, enhancing its organizational structures and culture, and increasing 
the customer and business value of the enterprise. 

It is important to realize, however, that information technology and information 
systems can be mismanaged and misapplied in such a way that IS performance prob- 
lems create both technological and business failures. Let’s look at an example of 
how information technology contributed to business failure and success at some major 
corporations. 


Certain IT initiatives fall into the “bet the company” category. Setting up an ERP! 
system from SAP? is one such choice. These complex undertakings carry both greater 
opportunities and greater risks than other enterprise software projects. Done right, 
an SAP deployment can transform an organization by streamlining operations, cutting 
costs, and opening up new business opportunities. Done wrong, it can become a 
multiyear nightmare. 

For BWXT Y-12, which manages the U.S. Department of Energy’s Y-12 National 
Security Complex outside of Oak Ridge, Tennessee, converting legacy systems to 


‘Recall that ERP stands for enterprise resource planning. This type of information system allows an organization to perform 
essentially all of its business functions by using a common interface, common data, and total connectivity across functions. 
We focus more on ERP in Chapter 8. 

SAP is a German company that specializes in the development of ERP software. 
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SAP has been a decade-long project. The project began in 1996 as a means of ad- 
dressing Y2k issues, and parts of the organization are still being moved over to the 
ERP system, yet each step along the way has delivered a tangible benefit. 

Not all implementations, however, have gone as smoothly, and SAP has developed 
a reputation for being difficult to implement. Several failed deployments have made 
the news over the past few years. The Hershey Co. began a $115 million deployment 
of SAP, Siebel Systems, and Manugistics software in 1997. Two years later, the com- 
pany experienced massive distribution problems that cut into its profits. In August 
2004, Hewlett-Packard reported that backlogs and lost revenue resulting from an 
SAP rollout for its enterprise servers cost $160 million. Whirlpool Corp. and Nike 
had similar experiences. What does not make the news is that these projects wind up 
working in the end. 

Nevertheless, even if the projects do finally return a result, it takes a lot of work 
to get to that point. Companies have found that SAP seems to take more investment 
in customization, more investment in training, and more time and cost to get off the 
ground than a lot of other solutions. The key, according to analysts, is not to over- 
buy. Many companies will buy three solutions and try to implement them at the same 
time; buying one module at a time seems to be a better strategy. 

The biggest part of deploying SAP, or any other ERP system for that matter, is 
not the software itself but the data and processes. Data conversion, in particular, can 
make or break any project. “Data conversion has been a big technical challenge,” 
says Brian Barton at BWXT. At his company, systems needed to be cleaned so that 
bad data were not moved into the new systems. Much of the work had to be done 
manually. “It’s easy to accumulate a lot of bad data over the years, particularly with 
the home-grown systems that have a looser data architecture and less-stringent va- 
lidity checks.” 

Once the initial goals have been achieved, further features can be added, or the 
system can be used in new ways; SAP also has a number of capabilities than can be 
rolled out one at a time. The key is to look at ERPs as an ongoing investment strat- 
egy rather than a one-time implementation. 


Source: Adapted from Drew Robb, “SAP Deployments: Pain for Gain,” Computerworld, September 4, 2006. 


Developing successful information system solutions to business problems is a major 
challenge for business managers and professionals today. As a business professional, 
you will be responsible for proposing or developing new or improved uses of infor- 
mation technologies for your company. As a business manager, you will frequently 
manage the development efforts of information systems specialists and other business 
end users. 

Most computer-based information systems are conceived, designed, and imple- 
mented using some form of systematic development process. Figure 1.13 shows that 
several major activities must be accomplished and managed in a complete IS develop- 
ment cycle. In this development process, end users and information specialists design 
information system applications on the basis of an analysis of the business require- 
ments of an organization. Examples of other activities include investigating the eco- 
nomic or technical feasibility of a proposed application, acquiring and learning how to 
use any software necessary to implement the new system, and making improvements to 
maintain the business value of a system. 

We discuss the details of the information systems development process in Chapter 
10. We will explore many of the business and managerial challenges that arise in de- 
veloping and implementing new uses of information technology in Chapters 11 and 
12. Now let’s look at how a company changed its development practices to deliver the 
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FIGURE 1.13 
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Con-Way, Inc. Panes. 


When someone has a good idea, they want to see it come to fruition right away. 
At transportation company Con-Way—founded in 1929, with more than 26,000 em- 
ployees and 2008 revenue over $5 billion—almost all good ideas require technology 
to implement. Yet historically, ideas would become cold by the time they made it 
through IT steering committees, project planning, and design reviews. Then, Con- 
Way became agile—that is, it adopted Agile development practices. 

Using Agile, software development is no longer accomplished through lengthy 
projects. 

Instead, the overall concept of the desired system is defined at a high level up 
front and then developed in short iterations. An iteration is typically no longer than 
one month, and the software is released for use after each iteration. As people use the 
software, they determine which features should be built next, providing a feedback 
loop that results in the highest priority functionality being built. One big change for 
IT is that with Agile, there is always an impending implementation date: There is 
never a feeling of being able to relax on a project. Meanwhile, developers, used to 
having private space, can feel that space is violated due to “pair programming,” which 
has two developers constructing the same piece of code at the same time, and to 
colocation, which has team members sitting as close together as humanly possible. 
As for the business users, Agile requires them to take a much more active role 
through the entire process. They must work jointly with IT to determine the priori- 
ties for each iteration, and they must provide daily direction to IT on the needs for 
the functionality being built. 

“T made the case for change in IT by explaining how the business would benefit 
if we delivered the highest priority functionality faster. I also kept reiterating what 
was in it for them—and there was a lot,” says Jackie Barretta, vice president and CIO 
of Con-Way, Inc. “At the same time, I made the case for change to the business by 
preparing a solid ROI that quantified the benefits of increasing the efficiency of 
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development processes, delivering the right functionality more quickly and reducing 
the overall amount of work in progress.” 

The change effort has been worth it: After nine months, Agile is delivering on its 
promises. The iterative approach to software development is providing a feedback 
loop that results in building the right functionality. “We no longer have the waste 
problem that was inherent in the old waterfall method. Agile is creating greater 
alignment between IT and the business because of the constant, daily interaction and 
because Agile techniques help IT personnel understand the business better,” says 
Barretta. “However, like anything that’s really going to pay off, Agile is a huge change 
for IT and the user community.” 


Source: Adapted from Jackie Barretta, “How to Instill Agile Development Practices Among Your IT Team,” CIO Magazine, 
January 14, 2009. 


As a prospective manager, business professional, or knowledge worker, you will be 
challenged by the ethical responsibilities generated by the use of information tech- 
nology. For example, what uses of information technology might be considered im- 
proper, irresponsible, or harmful to other people or to society? What is the proper 
business use of the Internet and an organization’s IT resources? What does it take to 
be a responsible end user of information technology? How can you protect yourself 
from computer crime and other risks of information technology? These are some of 
the questions that outline the ethical dimensions of information systems that we will 
discuss and illustrate with real world cases throughout this text. Figure 1.14 outlines 
some of the ethical risks that may arise in the use of several major applications of in- 
formation technology. The following example illustrates some of the security chal- 
lenges associated with conducting business over the Internet. 


Hannaford Bros. may have started as a fruit and vegetable stand in 1883, but it has 
expanded from its Maine roots to become an upscale grocer with more than 160 
stores throughout Maine, Massachusetts, New Hampshire, upstate New York, and 
Vermont. In March 2008, the supermarket chain disclosed a data security breach; 
Hannaford said in a notice to customers posted on its Web site that unknown intrud- 
ers had accessed its systems and stolen about 4.2 million credit and debit card numbers 
between December 7 and March 10. The breach affected all of Hannaford’s 


FIGURE 1.14 Examples of some of the ethical challenges that must be faced by business managers who implement 
major applications of information technology. 
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165 supermarkets in New England and New York, as well as 106 stores operated 
under the Sweetbay name in Florida and 23 independently owned markets that sell 
Hannaford products. 

In a likely precursor of what was yet to come, two class-action lawsuits were 
filed against the company within the week. The filers argued that inadequate data 
security at Hannaford had resulted in the compromise of the personal financial data 
of consumers, thereby exposing them to the risk of fraud. They also claimed the 
grocer also appeared not to have disclosed the breach to the public quickly enough 
after discovering it. 

Even though the Hannaford breach is relatively small compared with some other 
corporate security problems, it is likely to result in renewed calls for stricter regula- 
tions to be imposed on companies that fail to protect consumer data. In addition to 
facing the likelihood of consumer lawsuits, retailers who suffer breaches have to deal 
with banks and credit unions, which are getting increasingly antsy about having to 
shell out tens of thousands of dollars to pay for the cost of notifying their customers 
and reissuing credit and debit cards. 

Retailers, on the other hand, have argued that the commissions they pay to card 
companies on each transaction are supposed to cover fraud-related costs, making any 
additional payments a double penalty. They also have said that the only reason they 
store payment card data is because of requirements imposed on them by the major 
credit card companies. 

While the ultimate impact of these and other security breaches may be hard to 
quantify, it represents one of the most important challenges resulting from the ubiq- 
uitous use of electronic transaction processing and telecommunication networks in 
the modern networked enterprise, and one that is likely to keep growing every day. 
The security of customer and other sensitive data also represents one of the primary 
concerns of IT professionals. 


Source: Adapted from Jaikumar Vijayan, “Hannaford Hit by Class-Action Lawsuits in Wake of Data-Breach Disclosure,” 
Computerworld, March 20, 2008. 


Both information technology and the myriad of information systems it supports have 
created interesting, challenging, and lucrative career opportunities for millions of men 
and women all over the globe. At this point in your life you may still be uncertain 
about the career path you wish to follow, so learning more about information technol- 
ogy may help you decide if you want to pursue an IT-related career. In recent years, 
economic downturns have affected all job sectors, including IT. Further, rising labor 
costs in North America, Canada, and Europe have resulted in a large-scale movement 
to outsource basic software programming functions to India, the Middle East, and 
Asia-Pacific countries. Despite this move, employment opportunities in the informa- 
tion systems field are strong, with more new and exciting jobs emerging each day as 
organizations continue to expand their use of information technology. In addition, 
these new jobs pose constant human resource management challenges to all organiza- 
tions because shortages of qualified information systems personnel frequently occur. 
Dynamic developments in business and information technologies cause constantly 
changing job requirements in information systems, which will ensure that the long-term 
job outlook in IT remains both positive and exciting. 

Along with the myth that there are no jobs for IS professionals (we will dispel 
this one below!), another common myth is that IS professionals are computer geeks 
who live in a cubicle. Once again, nothing could be further from the truth! ‘Today’s IS 
professional must be highly skilled in communication, dealing with people, and, most 
of all, articulate in the fundamentals of business. The marketplace is demanding a 
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business technologist with a big “B” and a big “T.” The world of the IS professional is 
filled with constant challenge, variety, social interaction, and cutting-edge decision 
making. No desks and cubicles here. If action is what you are after, then you have 
found it here. 

One major recruiter of IS professionals is the IT industry itself. Thousands of 
companies develop, manufacture, market, and service computer hardware, soft- 
ware, data, and network products and services. The industry can also provide 
e-business and e-commerce applications and services, end-user training, or busi- 
ness systems consulting. The biggest need for qualified people, however, comes 
from the millions of businesses, government agencies, and other organizations that 
use information technology. They need many types of IS professionals, such as 
systems analysts, software developers, and network managers to help them plan, 
develop, implement, and manage today’s Internet-based and Web-enabled busi- 
ness/IT applications. 

The accounting industry is a more recent major recruiter of IS professionals. 
Recent legislation, entitled the Sarbanes-Oxley Act of 2002, required major changes 
with regard to auditing practices by public accounting firms and internal control 
processes within publicly held organizations of all sizes and industries. Many of 
these changes directly affect the IT/IS practices of all parties involved. To facilitate 
the execution of the covenants of Sarbanes-Oxley, the accounting industry is ac- 
tively recruiting graduates from accounting programs that have a significant 
emphasis on IS education. In addition, they are spending equal energy to recruit 
IS/IT professionals to work within the accounting industry. In either case, the result 
is a significant increase in demand for graduates with an IS/IT background or em- 
phasis. Figure 1.15 lists just a few of the many career roles available to the modern 
IT professional. 

According to recent reports by the U.S. Department of Labor, computer systems 
analysts, database administrators, and other managerial-level IS positions are expected 
to be among the fastest-growing occupations through 2012. Employment of IS pro- 
fessionals is expected to grow more than 36 percent (much higher than average) for all 
occupations as organizations continue to adopt and integrate increasingly sophisti- 
cated technologies. Job increases will be driven by very rapid growth in computer 
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system design and related services, which is projected to be one of the fastest-growing 
industries in the U.S. economy. In addition, many job openings will arise annually 
from the need to replace workers who move into managerial positions or other occu- 
pations or who leave the labor force. 

Despite the recent economic downturn among information technology firms, IS 
professionals still enjoy favorable job prospects. The demand for networking to fa- 
cilitate sharing information, expanding client/server environments, and the need for 
specialists to use their knowledge and skills in a problem-solving capacity will be 
major factors in the rising demand for computer systems analysts, database adminis- 
trators, and other IS professionals. Moreover, falling prices of computer hardware 
and software should continue to induce more businesses to expand their computer- 
ized operations and integrate new technologies. Io maintain a competitive edge and 
operate more efficiently, firms will keep demanding the services of professionals who 
are knowledgeable about the latest technologies and can apply them to meet the 
needs of businesses. 

Perhaps, the time has come to put a sharper edge on this message: the field of 
information systems is growing at an increasingly rapid pace and there is no risk of being 
unemployed upon graduation! It is this author’s belief that the concern of over a lack of 
TT/IS-related jobs was fueled by the news media and is now, quite simply, unfounded. 
There were headlines proclaiming the death of IS and the lack of jobs in the United 
States due to massive outsourcing and offshoring. The jobs that were being sent 
overseas were real ones, to be sure. They were, however, not the jobs that you or 
your fellow students were ever going to train for during your stay in college—unless, 
of course, you aspire to being a faceless voice in a call center. These jobs are service- 
related jobs that, while vital to the big picture, are not the management level, crea- 
tive business technologist positions that colleges and universities typically train their 
students to obtain. The real problem facing the IS field today is the /ack of graduates! 
Students are opting for other professions because of fear of low pay and unemploy- 
ment while recruiters are simultaneously begging for more graduates to feed their 
voracious appetites for more IS professionals. If you choose to avoid a career in in- 
formation systems, it should not be because there are no jobs, it does not have to do 
with people, and it is no fun. Over the course of this book, we will dispel, with 
strong evidence, all of these rumors and myths. Let’s start with some facts related to 
the first one. 

The Bureau of Labor Statistics makes for some compelling evidence in favor of a 
career in information systems: 


Prospects for qualified computer and information systems managers should be excellent. 
Fast-paced occupational growth and the limited supply of technical workers 
will lead to a wealth of opportunities for qualified individuals. While technical 
workers remain relatively scarce in the United States, the demand for them 
continues to rise. This situation was exacerbated by the economic downturn in 
the early 2000s, when many technical professionals lost their jobs. Since then, 
many workers have chosen to avoid this work since it is perceived to have 
poor prospects. 

People with management skills and an understanding of business practices and princi- 
ples will have excellent opportunities, as companies are increasingly looking to technology 
to drive their revenue. (Bureau of Labor Statistics Occupational Outlook Handbook, 
2008-2009) 


Increasingly, more sophisticated and complex technology is being implemented 
across all organizations, which will continue to fuel the demand for these computer 
occupations. The demand for systems analysts continues to grow to help firms maxi- 
mize their efficiency with available technology. Expansion of e-commerce—doing busi- 
ness on the Internet—and the continuing need to build and maintain databases that 
store critical information about customers, inventory, and projects are fueling demand 


24 © Module I / Foundation Concepts 


The Critical Role 
of Business 
Analysts 


The IS Function 


for database administrators familiar with the latest technology. Finally, the increasing 
importance placed on “cybersecurity”—the protection of electronic information—will 
result in a need for workers skilled in information security. Let’s take a look at the 
emerging role of business analysts as liasions between IT specialists and their business 
customers. 


For two decades, the CIO has been viewed as the ultimate broker between the 
business and technology functions. But while that may be an accurate perception 
in the executive boardroom, down in the trenches, business analysts (BA) have 
been the ones tasked with developing business cases for IT application develop- 
ment, in the process smoothing relations among competing parties and moving 
projects along. 

The 21st century business analyst is a liaison, bridge, and diplomat who balances 
the oftentimes incongruous supply of IT resources and demands of the business. A 
recent Forrester Research report found that those business analysts who were most 
successful were the ones who could “communicate, facilitate and analyze.” The busi- 
ness analyst is a hot commodity right now due to business reliance on technology, 
according to Jim McAssey, a principal at The W Group, a consulting firm. “The 
global delivery capabilities of technology today make the challenges of successfully 
bridging the gap between business and IT even harder,” he says. 

“Companies typically don’t invest in an IT project without a solid business case,” 
says Jeff Miller, senior vice president of Aetea, an IT staffing and consulting firm. 

A good business analyst is able to create a solution to a particular business prob- 
lem and act as a bridge to the technologists who can make it happen. “Without the 
BA role, CIOs are at significant risk that their projects will not solve the business 
problem for which they were intended,” says Miller. 

The ideal candidate will have five to ten or more years of experience (preferably 
in a specific industry), a technical undergraduate degree, and an MBA. 

Strong risk assessment, negotiation, and problem resolution skills are key, and 
hands-on experience is critical. Business analysts must be process-driven and able to 
see a project through conflict and change, from start to finish. “The BA also must 
have the ability to learn new processes,” says Miller. “A good BA learns business 
concepts and can quickly relate them to the specific needs of the project.” 

In the end, the more business technology analysts that are working in the busi- 
ness, the better off the CIO and IT function will be—no matter if the business tech- 
nology analysts are reporting into IT or the business side. That’s because those 
IT-savvy analysts, who will have a more in-depth understanding of and more exper- 
tise in technologies, will “ultimately help the business make better decisions when it 
comes to its interactions with IT,” contend the Forrester analysts. And “CIOs have 
new allies in the business.” Salaries range from $45,000 (entry level) to $100,000 
(senior business analyst) per year. 


Source: Adapted from Thomas Wailgum, “Why Business Analysts Are So Important for IT and CIOs,” CIO Magazine, 
April 16, 2008; and Katherine Walsh, “Hot Jobs: Business Analyst,” CIO Magazine, June 19, 2007. 


The successful management of information systems and technologies presents major 
challenges to business managers and professionals. Thus, the information systems 
function represents: 


e A major functional area of business equally as important to business success as the 
functions of accounting, finance, operations management, marketing, and human 
resource management. 
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An important contributor to operational efficiency, employee productivity and 
morale, and customer service and satisfaction. 


A recognized source of value to the firm. 


A major source of information and support needed to promote effective decision 
making by managers and business professionals. 


A vital ingredient in developing competitive products and services that give an 
organization a strategic advantage in the global marketplace. 


A dynamic, rewarding, and challenging career opportunity for millions of men 
and women. 


A key component of the resources, infrastructure, and capabilities of today’s net- 
worked business enterprises. 


A strategic resource. 
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System concepts underlie all business processes, as well as our understanding of infor- 
mation systems and technologies. That’s why we need to discuss how generic system 
concepts apply to business firms and the components and activities of information 
systems. Understanding system concepts will help you understand many other con- 
cepts in the technology, applications, development, and management of information 
systems that we cover in this text. For example, system concepts help us understand: 


e ‘Technology. Computer networks are systems of information processing compo- 
nents that use a variety of hardware, software, data management, and telecommu- 
nications network technologies. 


e Applications. E-business and e-commerce applications involve interconnected 
business information systems. 


e Development. Developing ways to use information technology in business in- 
cludes designing the basic components of information systems. 


e Management. Managing information technology emphasizes the quality, strate- 
gic business value, and security of an organization’s information systems. 


Read the Real World Case about large-scale problems involving information systems. 
We can learn a lot from this case regarding the critical role of good IT processes. See 
Figure 1.16. 


We have used the term system well over 100 times already and will use it thousands more 
before we are done. It therefore seems reasonable that we focus our attention on ex- 
actly what a system is. As we discussed at the beginning of the chapter, a system is 
defined as a set of interrelated components, with a clearly defined boundary, working together 
to achieve a common set of objectives by accepting inputs and producing outputs in an organized 
transformation process. Many examples of systems can be found in the physical and bio- 
logical sciences, in modern technology, and in human society. Thus, we can talk of the 
physical system of the sun and its planets, the biological system of the human body, 
the technological system of an oil refinery, and the socioeconomic system of a business 
organization. 
Systems have three basic functions: 


e Input involves capturing and assembling elements that enter the system to be 
processed. For example, raw materials, energy, data, and human effort must be 
secured and organized for processing. 


e Processing involves transformation processes that convert input into output. Ex- 
amples are manufacturing processes, the human breathing process, or mathemati- 
cal calculations. 


e Output involves transferring elements that have been produced by a transforma- 
tion process to their ultimate destination. For example, finished products, human 
services, and management information must be transmitted to their human users. 


Example. A manufacturing system accepts raw materials as input and produces fin- 
ished goods as output. An information system is a system that accepts resources (data) 
as input and processes them into products (information) as output. A business organi- 
zation is a system in which human and economic resources are transformed by various 
business processes into goods and services. 
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JetBlue and the Veterans 
Administration: The Critical 
Importance of IT Processes 


hen most people think of information technol- 
ogy, software and hardware immediately come 
to mind. While these are certainly important, 
good IT processes, particularly those that need to kick in dur- 
ing a disaster situation, are also critical. Most important, these 
need to be in place before, and not after, they are needed. For 
an example, go back to February 2007, when JetBlue Airways 
was forced to cancel more than 1,000 flights after an ice storm. 

“For one, we didn’t have enough of our home-office em- 
ployees or crew members trained on our reservation system, 
so while we were dispatching people to the airports to help, 
which was great, they weren’t trained to actually use the com- 
puter system. So we’re going through a process now where 
we’re actively training those crew members,” says spokesman 
Eric Brinker. The discount airline is also in the process of 
expanding the capabilities of its reservation crew members so 
they can accept more inbound calls. “We basically maxed 
out,” Brinker said. “We’re working on a system to be able to 
automatically notify them better to take phone calls.” 

In the middle of the crisis, JetBlue’s IT department de- 
veloped a database that allowed the airline’s scheduling team 
to improve multitasking. “They were receiving tons of phone 
calls from our crew members, and we created a database to 
enter in the whereabouts of our crew members. Then that 
information would sync up with the information about the 
crew members that was in the main system,” Brinker said. 
“Now, during a weather situation, our flight crews and flight 
hands can call us and give us the location of where they are, 
and we can start to rebuild the airline immediately using 
this tool. We do that by cross-referencing where the crew 


FIGURE 1.16 


Good IT processes are as important as hardware and 
software when it comes to creating business value 
through the use of technology. 


Source: Getty Images. 


members say they are versus where the computer says they 
are, which weren’t always in sync.” 

Brinker said the airline had never experienced a full 
meltdown before, so it hadn’t needed to use this type of 
database. “The system, which was developed in 24 hours and 
implemented in the middle of JetBlue’s crisis, has now been 
implemented as a full-time system,” he said. “It’s a real behind- 
the-scenes improvement for both our crew members and cus- 
tomers,” he said. JetBlue is also improving the way it 
communicates with its customers, including pushing out auto- 
mated flight alerts to customers via e-mail and mobile devices. 

Even seemingly smaller and less critical processes can 
have ramifications of a large magnitude in the interconnected 
world in which we live. In September 2007, during a hearing 
by the House Committee on Veterans’ Affairs, lawmakers 
learned about an unscheduled system failure that took down 
key applications in 17 Veterans Administration (VA) medical 
facilities for a day. Dr. Ben Davoren, the director of clinical 
informatics for the San Francisco VA Medical Center, char- 
acterized the outage as “the most significant technological 
threat to patient safety the VA has ever had.” Yet the shut- 
down grew from a simple change in management procedure 
that wasn’t properly followed. The small, undocumented 
change ended up bringing down the primary patient applica- 
tions at 17 VA medical centers in northern California. 

The breakdown exposed just how challenging it is to ef- 
fect substantial change in a complex organization the size of 
the VA Office of Information & Technology (OI&T). Begun 
in October 2005 and originally scheduled to be completed 
by October 2008, the “reforming” of the IT organization at 
the VA involved several substantial goals. As part of the re- 
form effort, the VA was to shift local control of IT infra- 
structure operations to regional data-processing centers. 

Historically, each of the 150 or so medical centers run by 
the VA had its own IT service, its own budget authority, and its 
own staff, as well as independence with regard to how the IT 
infrastructure evolved. All of the decisions regarding IT were 
made between a local IT leadership official and the director of 
that particular medical center. While that made on-site IT staff 
responsive to local needs, it made standardization across sites 
nearly impossible in areas such as security, infrastructure ad- 
ministration and maintenance, and disaster recovery. 

On the morning of August 31, 2007, staffers in medical 
centers around northern California starting their workday 
quickly discovered that they couldn’t log onto their patient 
systems. The primary patient applications, Vista and CPRS, 
had suddenly become unavailable. Vista, which stands for 
Veterans Health Information Systems and Technology Ar- 
chitecture, is the VA’s system for maintaining electronic 
health records. CPRS, the Computerized Patient Record 
System, is a suite of clinical applications that provides 
an across-the-board view of each veteran’s health record. It 
includes a real-time order-checking system, a notification 


28 © Module I / Foundation Concepts 


system to alert clinicians of significant events, and a clinical 
reminder system. Without access to Vista, doctors, nurses, 
and others were unable to pull up patient records. 

“There was a lot of attention on the signs and symptoms 
of the problem and very little attention on what is very often 
the first step you have in triaging an IT incident, which is, 
‘What was the last thing that got changed in this environ- 
ment?” Director Eric Raffin said. 

The affected medical facilities immediately implemented 
their local contingency plans, which consist of three levels: 
the first of those is a fail-over from the Sacramento Data 
Center to the Denver Data Center, according to Bryan 
D. Volpp, associate chief of staff and clinical informatics. 
Volpp assumed that the data center in Sacramento would 
move into the first level of backup—switching over to the 
Denver data center. It didn’t happen. 

On that day, the Denver site wasn’t touched by the out- 
age at all. The 11 sites running in that region maintained 
their normal operations throughout the day. So why didn’t 
Raffin’s team make the decision to fail over to Denver? 
“What the team in Sacramento wanted to avoid was putting 
at risk the remaining 11 sites in the Denver environment, 
facilities that were still operating with no glitches. The prob- 
lem could have been software-related,” Raffin says. In that 
case, the problem may have spread to the VA’s Denver facili- 
ties, as well. Since the Sacramento group couldn’t pinpoint 
the problem, they made a decision not to fail over. 

Greg Schulz, senior analyst at The Storage I/O Group, 
said the main vulnerability with mirroring is exactly what 
Raffin feared. “If I corrupt my primary copy, then my mirror 
is corrupted. If I have a copy in St. Louis and a copy in 
Chicago and they’re replicating in real time, they’re both 
corrupted, they’re both deleted.” That’s why a point-in-time 
copy is necessary, Schulz continued. “I have everything I 
need to get back to that known state.” 

According to Volpp, “the disruption severely interfered 
with our normal operation, particularly with inpatient and 
outpatient care and pharmacy.” The lack of electronic records 
prevented residents on their rounds from accessing patient 


CASE STUDY QUESTIONS 


1. Eric Brinker of JetBlue noted that the database devel- 
oped during the crisis had not been needed before be- 
cause the company had never experienced a meltdown. 
What are the risks and benefits associated with this ap- 
proach to IT planning? Provide some examples of each. 


2. With hindsight, we now know that the decision made 
by Eric Raffin of the VA not to fail over to the Denver 
site was the correct one. However, it involved failing to 
follow established backup procedures. With the infor- 
mation he had at the time, what other alternatives could 
he have considered? Develop at least two of them. 


3. A small, undocumented change resulted in the collapse 
of the VA system, largely because of the high interrela- 
tionship between its applications. What is the positive 
side of this high degree of interconnection, and how 
does this benefit patients? Provide examples from the 
case to justify your answer. 


charts to review the prior day’s results or add orders. Nurses 
couldn’t hand off from one shift to another through Vista, as 
they were accustomed. Discharges had to be written out by 
hand, so patients didn’t receive the normal lists of instructions 
or medications, which were usually produced electronically. 

Volpp said that within a couple of hours of the outage, 
“most users began to record their documentation on paper,” 
including prescriptions, lab orders, consent forms, and vital 
signs and screenings. Cardiologists couldn’t read EKGs, 
since those were usually reviewed online, nor could they or- 
der, update, or respond to consultations. 

In Sacramento, the group finally got a handle on what had 
transpired to cause the outage. “One team asked for a change 
to be made by the other team, and the other team made the 
change,” said Raffin. It involved a network port configuration, 
but only a small number of people knew about it. More im- 
portant, said Raffin, “the appropriate change request wasn’t 
completed.” A procedural issue was at the heart of the prob- 
lem. “We didn’t have the documentation we should have had,” 
he said. If that documentation for the port change had existed, 
Raffin noted, “that would have led us to very quickly provide 
some event correlation: Look at the clock, look at when the 
system began to degrade, and then stop and realize what we 
really needed to do was back those changes out, and the sys- 
tem would have likely restored itself in short order.” 

According to Evelyn Hubbert, an analyst at Forrester 
Research Inc., the outage that struck the VA isn’t uncommon. 
“They don’t make the front page news because it’s embarrass- 
ing.” Then, when something happens, she says, “it’s a com- 
plete domino effect. Something goes down, something else 
goes down. That’s unfortunately typical for many organiza- 
tions.” Schulz concurred. “You can have all the best software, 
all the best hardware, the highest availability, you can have 
the best people,” Schulz said. “However, if you don’t follow 
best practices, you can render all of that useless.” 


Source: Adapted from Linda Rosencrance, “Overwhelmed IT Systems Partly 
to Blame for JetBlue Meltdown,” Computerworld, February 20, 2007; and 
Dian Schafthauser, “The VAs Computer Systems Meltdown: What Hap- 
pened and Why,” Computerworld, November 20, 2007. 


REAL WORLD ACTIVITIES 


1. Go online and search for reports on the aftermath 
of these two incidents. What consequences, financial 
and otherwise, did the two organizations face? What 
changes, if any, were implemented as a result of these 
problems? Prepare a report and present your findings 
to the class. 


2. Search the Internet for examples of problems that 
companies have had with their IT processes. Break into 
small groups with your classmates to discuss your 
findings and what solutions you can propose to help 
organizations avoid the problems you discovered. 
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FIGURE 1.17 A common cybernetic system is a home temperature control system. The thermostat accepts the 
desired room temperature as input and sends voltage to open the gas valve, which fires the furnace. The resulting hot air goes 
into the room, and the thermometer in the thermostat provides feedback to shut the system down when the desired 
temperature is reached. 
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Temperature 
Feedback 
Feedback and The system concept becomes even more useful by including two additional elements: 
Control feedback and control. A system with feedback and control functions is sometimes 


called a cybernetic system, that is, a self-monitoring, self-regulating system. 


e Feedback is data about the performance of a system. For example, data about 
sales performance are feedback to a sales manager. Data about the speed, 
altitude, attitude, and direction of an aircraft are feedback to the aircraft’s 
pilot or autopilot. 


e Control involves monitoring and evaluating feedback to determine whether 
a system is moving toward the achievement of its goal. The control function 
then makes the necessary adjustments to a system’s input and processing 
components to ensure that it produces proper output. For example, a sales 
manager exercises control when reassigning salespersons to new sales territo- 
ries after evaluating feedback about their sales performance. An airline pilot, 
or the aircraft’s autopilot, makes minute adjustments after evaluating the 
feedback from the instruments to ensure the plane is exactly where the pilot 
wants it to be. 


Example. Figure 1.17 illustrates a familiar example of a self-monitoring, self-regulating, 
thermostat-controlled heating system found in many homes; it automatically monitors 
and regulates itself to maintain a desired temperature. Another example is the human 
body, which can be regarded as a cybernetic system that automatically monitors and 
adjusts many of its functions, such as temperature, heartbeat, and breathing. A busi- 
ness also has many control activities. For example, computers may monitor and con- 
trol manufacturing processes, accounting procedures help control financial systems, 
data entry displays provide control of data entry activities, and sales quotas and sales 
bonuses attempt to control sales performance. 


Other System Figure 1.18 uses a business organization to illustrate the fundamental components of 
Characteristics a system, as well as several other system characteristics. Note that a system does not 
exist in a vacuum; rather, it exists and functions in an environment containing other 
systems. If a system is one of the components of a larger system, it is a subsystem, and 
the larger system is its environment. 
Several systems may share the same environment. Some of these systems may 
be connected to one another by means of a shared boundary, or interface. Figure 1.18 
also illustrates the concept of an open system, that is, a system that interacts with other 
systems in its environment. In this diagram, the system exchanges inputs and outputs 
with its environment. Thus, we could say that it is connected to its environment by 
input and output interfaces. Finally, a system that has the ability to change itself or its 
environment to survive is an adaptive system. 
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FIGURE 1.18 


A business is an example of 
an organizational system in 
which economic resources 
(input) are transformed by 
various business processes 
(processing) into goods 
and services (output). 
Information systems 
provide information 
(feedback) about the 
operations of the system 

to management for the 
direction and maintenance 
of the system (control) as 
it exchanges inputs and 
outputs with its 
environment. 
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Example. Organizations such as businesses and government agencies are good exam- 
ples of the systems in society, which is their environment. Society contains a multitude 
of such systems, including individuals and their social, political, and economic institu- 
tions. Organizations themselves consist of many subsystems, such as departments, 
divisions, process teams, and other workgroups. Organizations are examples of open 
systems because they interface and interact with other systems in their environment. 
Finally, organizations are examples of adaptive systems because they can modify them- 
selves to meet the demands of a changing environment. 

If we apply our understanding of general system concepts to information systems, 
it should be easy to see the parallels. 

Information systems are made up of interrelated components: 


e People, hardware, software, peripherals, and networks. 
They have clearly defined boundaries: 
e Functions, modules, type of application, department, or end-user group. 


All the interrelated components work together to achieve a common goal by 
accepting inputs and producing outputs in an organized transformation process: 


e Using raw materials, hiring new people, manufacturing products for sale, and 
disseminating information to others. 


Information systems make extensive use of feedback and control to improve their 
effectiveness: 


e Error messages, dialog boxes, passwords, and user rights management. 


Components 
of an 
Information 
System 


FIGURE 1.19 


The components of an 
information system. All 
information systems use 
people, hardware, software, 
data, and network resources 
to perform input, 
processing, output, storage, 
and control activities that 
transform data resources 
into information products. 
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Many information systems are designed to change in relation to their environ- 
ments and are adaptive: 


e Intelligent software agents, expert systems, and highly specialized decision 
support systems. 


Information systems are systems just like any other system. Their value to the 
modern organization, however, is unlike any other system ever created. 


We have noted that an information system is a system that accepts data resources as in- 
put and processes them into information products as output. How does an information 
system accomplish this task? What system components and activities are involved? 

Figure 1.19 illustrates an information system model that expresses a fundamental 
conceptual framework for the major components and activities of information systems. 
An information system depends on the resources of people (end users and IS special- 
ists), hardware (machines and media), software (programs and procedures), data (data 
and knowledge bases), and networks (communications media and network support) to 
perform input, processing, output, storage, and control activities that transform data 
resources into information products. 

This information system model highlights the relationships among the compo- 
nents and activities of information systems. It also provides a framework that empha- 
sizes four major concepts that can be applied to all types of information systems: 


e People, hardware, software, data, and networks are the five basic resources of 
information systems. 


e People resources include end users and IS specialists, hardware resources consist 
of machines and media, software resources include both programs and proce- 
dures, data resources include data and knowledge bases, and network resources 
include communications media and networks. 


Processing 
Data 


sien of Data Resources | 
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FIGURE 1.20 


Examples of information 
system resources and 
products. 


Data resources are transformed by information processing activities into a variety 
of information products for end users. 

Information processing consists of the system activities of input, processing, out- 
put, storage, and control. 


Our basic IS model shows that an information system consists of five major resources: 
people, hardware, software, data, and networks. Let’s briefly discuss several basic con- 
cepts and examples of the roles these resources play as the fundamental components of 
information systems. You should be able to recognize these five components at work 
in any type of information system you encounter in the real world. Figure 1.20 out- 
lines several examples of typical information system resources and products. 


People are the essential ingredient for the successful operation of all information sys- 
tems. These people resources include end users and IS specialists. 


End users (also called users or clients) are people who use an information system 
or the information it produces. They can be customers, salespersons, engineers, 
clerks, accountants, or managers and are found at all levels of an organization. In 
fact, most of us are information system end users. Most end users in business are 
knowledge workers, that is, people who spend most of their time communicating 
and collaborating in teams and workgroups and creating, using, and distributing 
information. 


IS specialists are people who develop and operate information systems. They 
include systems analysts, software developers, system operators, and other mana- 
gerial, technical, and clerical IS personnel. Briefly, systems analysts design infor- 
mation systems based on the information requirements of end users, software 
developers create computer programs based on the specifications of systems 
analysts, and system operators help monitor and operate large computer systems 
and networks. 


The concept of hardware resources includes all physical devices and materials used in 
information processing. Specifically, it includes not only machines, such as computers 


Information System Resources and Products 


People Resources 
Specialists—systems analysts, software developers, systems operators. 
End Users—anyone else who uses information systems. 


Hardware Resources 
Machines—computers, video monitors, magnetic disk drives, printers, optical scanners. 
Media—floppy disks, magnetic tape, optical disks, plastic cards, paper forms. 


Software Resources 
Programs—operating system programs, spreadsheet programs, word processing 
programs, payroll programs. 
Procedures—data entry procedures, error correction procedures, paycheck distribution 
procedures. 


Data Resources 
Product descriptions, customer records, employee files, inventory databases. 


Network Resources 
Communications media, communications processors, network access, control software. 


Information Products 
Management reports and business documents using text and graphics displays, audio 
responses, and paper forms. 


Software Resources 


Data Resources 
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and other equipment, but also all data media, that is, tangible objects on which data 
are recorded, from sheets of paper to magnetic or optical disks. Examples of hardware 
in computer-based information systems are: 


e Computer systems, which consist of central processing units containing micro- 
processors and a variety of interconnected peripheral devices such as printers, 
scanners, monitors, and so on. Examples are handheld, laptop, tablet, or desktop 
microcomputer systems, midrange computer systems, and large mainframe com- 
puter systems. 


e Computer peripherals, which are devices such as a keyboard, electronic mouse, 
trackball, or stylus for the input of data and commands, a video screen or printer 
for the output of information, and magnetic or optical disk drives for the storage 
of data resources. 


The concept of software resources includes all sets of information processing instruc- 
tions. This generic concept of software includes not only the sets of operating instruc- 
tions called programs, which direct and control computer hardware, but also the sets 
of information processing instructions called procedures that people need. 

It is important to understand that even information systems that do not use com- 
puters have a software resource component. This claim is true even for the informa- 
tion systems of ancient times or the manual and machine-supported information 
systems still used in the world today. They all require software resources in the form 
of information processing instructions and procedures to properly capture, process, 
and disseminate information to their users. 

The following are examples of software resources: 


e System software, such as an operating system program, which controls and sup- 
ports the operations of a computer system. Microsoft Windows and Unix are two 
examples of popular computer operating systems. 


e Application software, which are programs that direct processing for a particular 
use of computers by end users. Examples are sales analysis, payroll, and word pro- 
cessing programs. 


e Procedures, which are operating instructions for the people who will use an in- 
formation system. Examples are instructions for filling out a paper form or using 
a software package. 


Data are more than the raw material of information systems. The concept of data re- 
sources has been broadened by managers and information systems professionals. They 
realize that data constitute valuable organizational resources. Thus, you should view 
data just as you would any organizational resource that must be managed effectively to 
benefit all stakeholders in an organization. 

The concept of data as an organizational resource has resulted in a variety of 
changes in the modern organization. Data that previously were captured as a result 
of a common transaction are now stored, processed, and analyzed using sophisti- 
cated software applications that can reveal complex relationships among sales, cus- 
tomers, competitors, and markets. In today’s wired world, the data to create a 
simple list of an organization’s customers are protected with the same energy as the 
cash in a bank vault. Data are the lifeblood of today’s organizations, and the effec- 
tive and efficient management of data is considered an integral part of organiza- 
tional strategy. 

Data can take many forms, including traditional alphanumeric data, composed of 
numbers, letters, and other characters that describe business transactions and other 
events and entities; text data, consisting of sentences and paragraphs used in written 
communications; image data, such as graphic shapes and figures or photographic and 
video images; and audio data, including the human voice and other sounds. 
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Network Resources 


The data resources of information systems are typically organized, stored, and 
accessed by a variety of data resource management technologies into: 


e Databases that hold processed and organized data. 


e Knowledge bases that hold knowledge in a variety of forms, such as facts, rules, 
and case examples about successful business practices. 


For example, data about sales transactions may be accumulated, processed, and 
stored in a Web-enabled sales database that can be accessed for sales analysis reports 
by managers and marketing professionals. Knowledge bases are used by knowledge 
management systems and expert systems to share knowledge or give expert advice on 
specific subjects. We explore these concepts further in subsequent chapters. 


Data versus Information. The word data is the plural of datum, though data com- 
monly represents both singular and plural forms. Data are raw facts or observations, 
typically about physical phenomena or business transactions. For example, a spacecraft 
launch or the sale of an automobile would generate a lot of data describing those 
events. More specifically, data are objective measurements of the attributes (the char- 
acteristics) of entities (e.g., people, places, things, events). 


Example. Business transactions, such as buying a car or an airline ticket, can produce 
a lot of data. Just think of the hundreds of facts needed to describe the characteristics 
of the car you want and its financing or the intricate details for even the simplest air- 
line reservation. 

People often use the terms data and information interchangeably. However, it is 
better to view data as raw material resources that are processed into finished informa- 
tion products. Then we can define information as data that have been converted into 
a meaningful and useful context for specific end users. Thus, data are usually subjected 
to a value-added process (data processing or information processing) during which 
(1) their form is aggregated, manipulated, and organized; (2) their content is analyzed 
and evaluated; and (3) they are placed in a proper context for a human user. 

The issue of context is really at the heart of understanding the difference between 
information and data. Data can be thought of as context independent: A list of num- 
bers or names, by itself, does not provide any understanding of the context in which it 
was recorded. In fact, the same list could be recorded in a variety of contexts. In con- 
trast, for data to become information, both the context of the data and the perspective 
of the person accessing the data become essential. The same data may be considered 
valuable information to one person and completely irrelevant to the next. Just think of 
data as potentially valuable to all and information as valuable relative to its user. 


Example. Names, quantities, and dollar amounts recorded on sales forms represent 
data about sales transactions. However, a sales manager may not regard these as infor- 
mation. Only after such facts are properly organized and manipulated can meaningful 
sales information be furnished and specify, for example, the amount of sales by prod- 
uct type, sales territory, or salesperson. 


‘Telecommunications technologies and networks like the Internet, intranets, and 
extranets are essential to the successful e-business and e-commerce operations of all 
types of organizations and their computer-based information systems. Telecommuni- 
cations networks consist of computers, communications processors, and other devices 
interconnected by communications media and controlled by communications soft- 
ware. The concept of network resources emphasizes that communications technolo- 
gies and networks are fundamental resource components of all information systems. 
Network resources include: 


e Communications media. Examples include twisted-pair wire, coaxial and fiber- 
optic cables, and microwave, cellular, and satellite wireless technologies. 


FIGURE 1.21 
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Information System Activities 


e Input. Optical scanning of bar-coded tags on merchandise. 

e Processing. Calculating employee pay, taxes, and other payroll deductions. 
© Output. Producing reports and displays about sales performance. 

e Storage. Maintaining records on customers, employees, and products. 


© Control. Generating audible signals to indicate proper entry of sales data. 


e Network infrastructure. This generic category emphasizes that many hardware, 
software, and data technologies are needed to support the operation and use of a 
communications network. Examples include communications processors, such as 
modems and internetwork processors, and communications control software, 
such as network operating systems and Internet browser packages. 


Regardless of the type of information system, the same basic information system 
activities occur. Let’s take a closer look now at each of the basic data or information 
processing activities. You should be able to recognize input, processing, output, stor- 
age, and control activities taking place in any information system you are studying. 
Figure 1.21 lists business examples that illustrate each of these information system 
activities. 


Data about business transactions and other events must be captured and prepared for 
processing by the input activity. Input typically takes the form of data entry activities 
such as recording and editing. End users usually enter data directly into a computer 
system or record data about transactions on some type of physical medium such as a 
paper form. This entry includes a variety of editing activities to ensure that they have 
recorded the data correctly. Once entered, data may be transferred onto a machine- 
readable medium, such as a magnetic disk, until needed for processing. 

For example, data about sales transactions may be recorded on source documents 
such as paper order forms. (A source document is the original, formal record of a 
transaction.) Alternatively, salespersons might capture sales data using computer key- 
boards or optical scanning devices; they are visually prompted to enter data correctly by 
video displays. This method provides them with a more convenient and efficient user 
interface, that is, methods of end-user input and output with a computer system. Meth- 
ods such as optical scanning and displays of menus, prompts, and fill-in-the-blank for- 
mats make it easier for end users to enter data correctly into an information system. 


Data are typically subjected to processing activities, such as calculating, comparing, 
sorting, classifying, and summarizing. These activities organize, analyze, and manipu- 
late data, thus converting them into information for end users. The quality of any data 
stored in an information system also must be maintained by a continual process of cor- 
recting and updating activities. 


Example. Data received about a purchase can be (1) added to a running total of sales re- 
sults, (2) compared to a standard to determine eligibility for a sales discount, (3) sorted in 
numerical order based on product identification numbers, (4) classified into product cate- 
gories (e.g., food and nonfood items), (5) summarized to provide a sales manager with in- 
formation about various product categories, and finally (6) used to update sales records. 


Information in various forms is transmitted to end users and made available to them in 
the output activity. The goal of information systems is the production of appropriate 
information products for end users. Common information products include messages, 
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reports, forms, and graphic images, which may be provided by video displays, audio 
responses, paper products, and multimedia. We routinely use the information pro- 
vided by these products as we work in organizations and live in society. For example, a 
sales manager may view a video display to check on the performance of a salesperson, 
accept a computer-produced voice message by telephone, and receive a printout of 
monthly sales results. 


Storage is a basic system component of information systems. Storage is the informa- 
tion system activity in which data are retained in an organized manner for later use. 
For example, just as written text material gets organized into words, sentences, para- 
graphs, and documents, stored data are commonly organized into a variety of data ele- 
ments and databases. This organization facilitates their later use in processing or 
retrieval as output when needed by users of a system. Such data elements and data- 
bases are discussed further in Chapter 5, Data Resource Management. 


An important information system activity is the control of system performance. An 
information system should produce feedback about its input, processing, output, 
and storage activities. This feedback must be monitored and evaluated to determine 
if the system is meeting established performance standards. Then appropriate sys- 
tem activities must be adjusted so that proper information products are produced 
for end users. 

For example, a manager may discover that subtotals of sales amounts in a sales re- 
port do not add up to total sales. This conflict might mean that data entry or process- 
ing procedures need to be corrected. Then changes would have to be made to ensure 
that all sales transactions would be properly captured and processed by a sales infor- 
mation system. 


As a business professional, you should be able to recognize the fundamental compo- 
nents of information systems you encounter in the real world. This demand means 


that you should be able to identify: 

e The people, hardware, software, data, and network resources they use. 

e The types of information products they produce. 

e The way they perform input, processing, output, storage, and control activities. 
This kind of understanding will help you be a better user, developer, and manager 

of information systems. As we have pointed out in this chapter, this is important to 


your future success as a manager, entrepreneur, business professional, or modern busi- 
ness technologist. 


IS Framework for Business Professionals. The IS 
knowledge that a business manager or professional 
needs to know is illustrated in Figure 1.2 and covered 
in this chapter and text. This knowledge includes 

(1) foundation concepts: fundamental behavioral, techni- 
cal, business, and managerial concepts like system 
components and functions, or competitive strategies; 
(2) information technologies: concepts, developments, or 
management issues regarding hardware, software, 
data management, networks, and other technologies; 


(3) business applications: major uses of IT for business 
processes, operations, decision making, and strategic/ 
competitive advantage; (4) development processes: how 
end users and IS specialists develop and implement 
business/IT solutions to problems and opportunities 
arising in business; and (5) management challenges: 
how to manage the IS function and IT resources 
effectively and ethically to achieve top performance 
and business value in support of the business strate- 
gies of the enterprise. 


Business Roles of Information Systems. Informa- 
tion systems perform three vital roles in business firms. 
Business applications of IS support an organization’s 
business processes and operations, business decision 
making, and strategic competitive advantage. Major 
application categories of information systems include 
operations support systems, such as transaction 
processing systems, process control systems, and enter- 
prise collaboration systems; and management support 
systems, such as management information systems, de- 
cision support systems, and executive information sys- 
tems. Other major categories are expert systems, 
knowledge management systems, strategic information 
systems, and functional business systems. However, in 
the real world, most application categories are com- 
bined into cross-functional information systems that 
provide information and support for decision making 
and also performing operational information process- 
ing activities. Refer to Figures 1.7, 1.9, and 1.11 for 
summaries of the major application categories of infor- 
mation systems. 


System Concepts. A system is a group of interrelated 
components, with a clearly defined boundary, working 
toward the attainment of a common goal by accepting 
inputs and producing outputs in an organized transfor- 
mation process. Feedback is data about the performance 
of a system. Control is the component that monitors 
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and evaluates feedback and makes any necessary adjust- 
ments to the input and processing components to en- 
sure that proper output is produced. 


Information System Model. An information system 
uses the resources of people, hardware, software, data, 
and networks to perform input, processing, output, 
storage, and control activities that convert data re- 
sources into information products. Data are first col- 
lected and converted to a form that is suitable for 
processing (input). Then the data are manipulated and 
converted into information (processing), stored for fu- 
ture use (storage), or communicated to their ultimate 
user (output) according to correct processing proce- 
dures (control). 


IS Resources and Products. Hardware resources 
include machines and media used in information 
processing. Software resources include computerized in- 
structions (programs) and instructions for people (proce- 
dures). People resources include information systems 
specialists and users. Data resources include alphanu- 
meric, text, image, video, audio, and other forms of data. 
Network resources include communications media and 
network support. Information products produced by an 
information system can take a variety of forms, including 
paper reports, visual displays, multimedia documents, 
e-messages, graphics images, and audio responses. 


Key Terms and Concepts 


These are the key terms and concepts of this chapter. The page number of their first explanation appears in parentheses. 


1. 


Computer-based information 
system (8) 


. Control (36) 


3. Data (34) 


. Data or information 


processing (35) 


5. Data resources (33) 


. Developing successful information 


system solutions (18) 


. E-business (12) 


8. E-business applications (12) 


. E-commerce (13) 


. Enterprise collaboration 


systems (12) 


. Extranet (12) 
. Feedback (29) 


. Hardware resources (32) 


a. Machines (32) 
b. Media (33) 


14. Information (34) 
a. Information products (35) 
15. Information system (4) 


16. Information system 
activities (35) 
a. Input (26) 
b. Processing (26) 
Output (26) 
. Storage (36) 
e. Control (29) 
17. Information system model (31) 
18. Intranet (12) 
19. Knowledge workers (32) 


20. Management information 
systems (15) 


QS 


21. Network resources (34) 
22. People resources (32) 


a. IS specialists (32) 
b. End users (32) 


23. 


24. 


25. 
26. 


Roles of IS in business (8) 


a. Support of business processes 
and operations (8) 

b. Support of business decision 
making (8) 

c. Support of strategies for 
competitive advantage (9) 


Software resources (33) 


a. Programs (33) 
b. Procedures (33) 


System (26) 
‘Types of information systems (13) 


a. Cross-functional informational 
systems (16) 
b. Management support 
systems (14) 
c. Operations support systems (13) 
d. Functional business systems (16) 
e. ‘Transaction processing 
systems (14) 
f. Process control systems (14) 
g. Enterprise collaboration 
systems (14) 


38 © 


Module I / Foundation Concepts 


Review Quiz 


Match one of the previous key terms and concepts with one of the following brief examples or definitions. Look for the best 
fit for answers that seem to fit more than one key term or concept. Defend your choices. 


— l. 


= IN, 


= E 


=—— I3: 


—_— 14. 
—___15. 


— 16 


— 18. 


=— 19. 


— 20 


People who spend most of their workday creating, 
using, and distributing information. 


. Computer hardware and software, networks, data 


management, and other technologies. 


. Information systems support an organization’s 


business processes, operations, decision making, 
and strategies for competitive advantage. 


. Using IT to reengineer business processes to 


support e-business operations. 


. Using Web-based decision support systems to 


support sales managers. 


. Using information technology for e-commerce to 


gain a strategic advantage over competitors. 


. Asystem that uses people, hardware, software, 


and network resources to collect, transform, and 
disseminate information within an organization. 


. An information system that uses computers and 


their hardware and software. 


. Anyone who uses an information system or the 


information it produces. 


. Applications using the Internet, corporate 


intranets, and interorganizational extranets for 
e-business operations, e-commerce, and enterprise 
collaboration. 


The buying, selling, marketing, and servicing of 
products over the Internet and other networks. 


Groupware tools to support collaboration among 
networked teams. 


A group of interrelated components with a clearly 
defined boundary working together toward the 
attainment of a common goal. 


Data about a system’s performance. 


Making adjustments to a system’s components so 
that it operates properly. 


. Facts or observations. 
__ 17. 


Data that have been placed into a meaningful 
context for an end user. 


Converting data into information is a type of this 
kind of activity. 


An information system uses people, hardware, 
software, network, and data resources to perform 
input, processing, output, storage, and control ac- 
tivities that transform data resources into informa- 
tion products. 


. Machines and media. 
_ ill, 


Computers, disk drives, video monitors, and 
printers are examples. 


22. 


— 23. 
— 2A 
25, 
— 26. 
eee 
—___ 28. 
-~—. 29. 
—— 30. 
= — əl, 
= 32. 


a 


A: 


-—— 35. 


____ 36. 


S 


= 90: 


_ 39. 


=— 40. 


iH: 


aH. 


=P. 


44. 


—— 


Magnetic disks, optical disks, and paper forms are 
examples. 


Programs and procedures. 

A set of instructions for a computer. 

A set of instructions for people. 

End users and information systems professionals. 
Using the keyboard of a computer to enter data. 
Computing loan payments. 

Printing a letter you wrote using a computer. 
Saving a copy of the letter on a magnetic disk. 
Having a sales receipt as proof of a purchase. 


Information systems can be classified into opera- 
tions, management, and other categories. 


Includes transaction processing, process control, 
and end-user collaboration systems. 


Includes management information, decision sup- 
port, and executive information systems. 


Information systems that perform transaction 
processing and provide information to managers 
across the boundaries of functional business areas. 


Internet-like networks and Web sites inside a 
company. 

Interorganizational Internet-like networks among 
trading partners. 


Using the Internet, intranets, and extranets to em- 
power internal business operations, e-commerce, 
and enterprise collaboration. 


Information systems that focus on operational and 
managerial applications in support of basic busi- 
ness functions such as accounting or marketing. 


Data should be viewed the same way as any 
organizational resource that must be managed 
effectively to benefit all stakeholders in an 
organization. 


A major challenge for business managers and pro- 
fessionals today in solving business problems. 


Examples include messages, reports, forms, and 
graphic images, which may be provided by video 
displays, audio responses, paper products, and 
multimedia. 


These include communications media and network 
infrastructure. 


People who develop and operate information 
systems. 


The execution of a set of activities in order to 
convert data into information. 


___ 46. Those systems implemented in order to direct phys- 
ical conversion processes, such as oil refinement. 


—— 47. The second stage of information systems evolu- 
tion, focused on providing managerial users with 
information relevant to decision making in the 
form of predefined reports. 
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—— 48. A type of operation support systems geared 


toward the recording and processing of data 
captured as a result of business transactions. 


—— 49. A type of operation support systems that en- 


hance team and workgroup communication 
and productivity. 


Discussion Questions 


1. How can information technology support a company’s 
business processes and decision making and give it a 


competitive advantage? Give examples to illustrate your 


answer. 


2. How does the use of the Internet, intranets, and ex- 
tranets by companies today support their business pro- 
cesses and activities? 


3. Refer to the Real Word Case on eCourier, Cablecom, 
and Bryan Cave in the chapter. Jay Bregman, CTO and 
cofounder of eCourier, notes the company hopes their 
innovative use of technology will become a differentia- 


tor in their competitive market. More generally, to what 


extent do specific technologies help companies gain an 
edge over their competitors? How easy or difficult 
would be to imitate such advantages? 


4. Why do big companies still fail in their use of informa- 
tion technology? What should they be doing differently? 


5. How can a manager demonstrate that he or she is a re- 


sponsible end user of information systems? Give several 


examples. 


10. 


. Refer to the Real World Case on JetBlue and the VA in 


the chapter. How could a process be designed such that 
these domino effects can be avoided or to some extent 
controlled? Defend your proposal. 


. What are some of the toughest management challenges 


in developing IT solutions to solve business problems 
and meet new business opportunities? 


. Why are there so many conceptual classifications 


of information systems? Why are they typically 
integrated in the information systems found in the 
real world? 


. In what major ways have information systems in busi- 


ness changed during the last 40 years? What is one ma- 
jor change you think will happen in the next 10 years? 
Refer to Figure 1.4 to help you answer. 


Refer to the real world example about ERPs in the 
chapter. Are the failures and successes described due to 
managerial or technological challenges? Explain. 


Analysis Exercises 


Complete the following exercises as individual or group projects that apply chapter concepts to real world business situations. 


1. Understanding the Information System 
The Library as an Information System 


A library makes an excellent information systems model. 


It serves as a very large information storage facility with 

text, audio, and video data archives. Look up the defini- 

tions for each term listed below and briefly explain a 

library’s equivalents. 

Input 

. Processing 

Output 

. Storage 

. Control 

. Feedback 

2. Career Research on the Web 
Comparing Information Sources 
Select a job title for a career you would like to pursue as a 
summer intern or new graduate. Provide a real-world 
example of each element in Figure 1.19. You may need to 
interview someone familiar with this position to find the 
information you require. 


moana p 


3. 


Skydive Chicago: Efficiency and Feedback 

Digital Data 

Skydive Chicago (www.SkydiveChicago.com) is one of 
the United States’ premier skydiving resorts, serving 
skydivers ranging in skills from first-time jumpers to in- 
ternationally competitive freefly teams. 

Each student in Skydive Chicago’s training program 
makes a series of progressive training jumps under the di- 
rect supervision of a United States Parachute Association— 
rated jumpmaster. The training program gears each 
jump in the series toward teaching one or two new 
skills. Jumpmasters video their students’ jumps. Stu- 
dents use the feedback these videos provide to identify 
mistakes. They often copy their videos onto a personal 
tape for future reference. 

Jumpmasters may also copy well-executed student 
skydives to the facility’s tape library. All students are 
given access to the dropzone’s training room and are 
encouraged to watch video clips in preparation for their 
next training jump. This step saves jumpmasters, who 
are paid per jump, considerable time. Jumpmasters also 
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use these videos to evaluate their training method’s 
effectiveness. 


a. How can this information system benefit the skydiv- 
ing student? 

b. How can this information system benefit Skydive 
Chicago? 

c. Draw an information systems model (Figure 1.19). 
Fill in your diagram with the information about 
people, hardware, software, and other resources 
from this exercise. 


. Are Textbooks History? 

Trends in Information Systems 

The wealth of free information available via the Inter- 
net continues to grow at incredible rates. Search en- 
gines such as Google make locating useful information 
practical. This textbook often explores the Internet’s 
impact on various industries, and the textbook industry 
is no exception. Is it possible that free Internet content 
might one day replace textbooks? 


a. Go to www.google.com and use the search box to 
look up “End user.” Were any of Google’s first five 
search results useful with respect to this course? 

b. Go to www.wikipedia.com and use the search box to 
look up “Knowledge worker.” Compare Wikipedia’s 
article with the information provided within this 
textbook. Which source did you find easiest to use? 


What advantages did Wikipedia provide? What ad- 
vantages did this textbook provide? 

c. Did Google, Wikipedia, or this textbook provide the 
most useful information about “Intranets”? Why? 


5. Careers in IS 


Disaster Recovery 
“How important are your data to you?” “What would 
happen if... ?” While business managers focus on 
solving business problems and determining what their 
information systems should do, disaster recovery con- 
sultants ask what would happen if things go wrong. 
With careful advance planning, disaster recovery 
specialists help their clients prevent calamity. Although 
this topic covers a wide variety of software issues, instal- 
lation configuration issues, and security threats, exam- 
ining common end-user mistakes may also prove 
enlightening. Common end-user mistakes include: 


e Failure to save work in progress frequently. 
Failure to make a backup copy. 

e Failure to store original and backup copies in differ- 
ent locations. 


For each of the common end-user mistakes listed 
above, answer the following questions: 
a. How might this mistake result in data loss? 


b. What procedures could you follow to prevent this 
risk? 


REAL WORLD 
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Sew What? Inc.: The Role of 


Information Technology in Small 
Business Success 


hat do Sting, Elton John, and Madonna have 

in common? Besides being international rock 

stars, they all use theatrical backdrops designed 
and manufactured by custom drapery maker Sew What? Inc. 
Based in Rancho Dominguez, California, Sew What? pro- 
vides custom theatrical draperies and fabrics for stages, 
concerts, fashion shows, and special events worldwide and 
has become an industry leader in rock-and-roll staging. 

Founded in 1992 by Australian-born Megan Duckett, 
Sew What? has grown from a tiny kitchen-and-garage op- 
eration to a multimillion-dollar enterprise, thanks to Duck- 
ett’s never-say-no approach to customer satisfaction. “When 
Isee a problem, I just don’t back down. I find a way to over- 
come it and I use everybody I know to help me,” she says. 

What made it possible for a one-woman business that 
started in a kitchen to evolve and grow into a multimillion- 
dollar company with 35 employees? Megan Duckett at- 
tributes her success to hard work, quality workmanship, and 
especially information technology. 

Sew What? has enjoyed explosive growth in recent years, 
reaching $4 million per year in sales by the end of 2006. 
Company president Duckett credits much of her firm’s rapid 
growth to its ability to leverage information technology and 
the Internet to drive sales. “Before we put up our Web site, 
sewwhatinc.com, our business was almost all local,” says 
Duckett. “But after launching the Web site three years ago, 
we now have clients all over the world. In fact, last year our 
revenue grew 45% on the previous year’s sales, and this year 
we are on target to enjoy a 65% increase on 2005 sales. And 
nearly all that growth came from Web-driven sales.” 

Although the company’s Web site may take center stage, 
managing all the business the site brings in requires a lot of 
effort behind the scenes. In particular, Duckett relies on a 
solid IT infrastructure to help keep the company running 
smoothly. “We are a customer-centric company,” notes 
Duckett. “It’s critical that we have excellent back-office 
information technology to manage the business and deliver 
outstanding service to our customers.” 

Sew What? runs most of its business with Intuit’s Quick- 
Books Enterprise Solutions Manufacturing and Wholesale 
Edition software and Microsoft's Windows Server operating 
system installed on a Dell PowerEdge 860 server, sporting 
an Intel Xeon processor and 146 gigabytes of disk storage. 
According to Duckett, “Running our business requires a lot 
of storage. In addition to customer information and vital 
operational and financial QuickBooks files, we need to store 
thousands of drapery and fabric image files, customer instruc- 
tion document files, and other types of data.” Sew What?’s 
additional computer support includes an older Dell Pow- 
erEdge 500 server dedicated to a few smaller applications and 
a variety of Dell desktop PC systems for employees. 

Sew What? started in 1992 as a part-time endeavor, with 
Duckett cutting and sewing fabric on her kitchen table. She 


went full time in 1997 and incorporated in 1998. The im- 
portant role technology plays in running a successful small 
business hit home when she lost a big contract. The poten- 
tial client said that without a Web site, her company “lacked 
credibility.” “Before losing that contract, I thought, ‘I run a 
sewing business, a cottage craft. I don’t need a Web site,” 
she says. Duckett admits she was rather cocky, mainly be- 
cause she had grown her business “quite well” by word of 
mouth alone. “I quickly learned the error of that thought 
process. You can’t have that attitude and stick around,” she 
acknowledges. 

Losing the contract also coincided with a period of low 
growth between 2001 and 2002. That’s when Duckett de- 
cided to embrace technology. Using Microsoft Publisher, 
she designed and built her own Web site. “You figure things 
out and learn how to do it yourself when budgets are thin,” 
she admits. 

Duckett kept working to improve the site and make it 
better for her customers. A year later, feeling that the site 
needed refreshing, she signed up for a 10-week course in 
Dreamweaver and again completely rebuilt the site. Yet an- 
other Web site reconstruction helped Sew What? grow into 
a company with customers around the world and a clientele 
list that includes international rock stars, Gucci, and Rolling 
Stone magazine. 

In 2005, Duckett decided she needed to improve the 
site’s navigation because “I wanted it to be sleek and to pro- 
vide a really good customer experience. That was beyond my 
abilities, so we hired a Web marketing consulting company 
to build a custom navigation system for the site.” 

She worked with the hired guns on branding, search en- 
gine optimization, overall design, and site layout. Duckett 
still provides all the content, including text and images. 
There’s also a Spanish version of the site, and the profession- 
als tuned up the main site’s search features to include spell- 
ing variants for different English-speaking countries. For 
example, you can search for the American spelling of theater 
or the British and Australian version, theatre. 

The site also lets potential customers review all kinds 
of color swatches and teaches them how to calculate accu- 
rate measurements for their projects; the differences be- 
tween a scrim, a tormentor, and a traveler curtain; the 
proper care and feeding of a variety of drapery materials; 
and a lot more. 

While perusing the Dell Web site one day, Duckett saw 
a news article about the Dell/NFIB Small Business Excel- 
lence Award. The National Federation of Independent Busi- 
nesses (NFIB) and Dell Inc. present this annual prize to one 
small business in recognition of its innovative use of tech- 
nology to improve its customers’ experience. The winner 
receives $30,000 worth of Dell products and services, a life- 
time membership to the NFIB, and a day at Dell’s headquar- 
ters with Michael Dell and other senior executives. 
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“The description of the kinds of businesses they 
were looking for perfectly described Sew What?” Duckett 
realized. “Everything they were looking for, we’d done, so I 
decided to enter. My husband [and business partner] laughed 
and reminded me that I never win anything.” Writing the 
essay for the contest caused Duckett to reflect on everything 
she and her employees had achieved over the years: “We 
got to sit back and feel really proud of ourselves. Just that 
process was enough to invigorate everyone in our weekly 
production meetings.” 

The contest judges also recognized Megan Duckett’s 
passionate commitment to customer satisfaction and use of 
information technology for business success, so they awarded 
Sew What? the Small Business Excellence Award. Winning 
the award proved to be a very emotional experience. Look- 
ing at the caliber and achievements of the nine other final- 
ists, Duckett figured Sew What? would remain just a top-10 
finalist: “I could not believe that a big company like Dell—so 
entrepreneurial and advanced in every way—would look at 
our little company and recognize it.” 

Like other small business owners, Duckett puts an enor- 
mous amount of physical and emotional energy into her 
work. “Winning this award is so flattering on a personal 
level,” she says. “This business is ingrained in every cell of 
my body, and to have someone saying, ‘Good job,’ well, in 
small business, nobody ever says that to you.” 

‘That may have been true previously, but Sew What?’s 
technology leadership and business success continue to earn 
recognition. In March 2007, the company received a Stevie 
Award for Women in Business for “most innovative company 


CASE STUDY QUESTIONS 


1. How do information technologies contribute to the 
business success of Sew What? Inc.? Give several exam- 
ples from the case regarding the business value of infor- 
mation technology that demonstrate this conclusion. 


2. If you were a management consultant to Sew What? 
Inc., what would you advise Megan Duckett to do at 
this point to be even more successful in her business? 
What role would information technology play in your 
proposals? Provide several specific recommendations. 


3. How could the use of information technology help a 
small business you know be more successful? Provide 
several examples to support your answer. 


of the year” among those with up to 100 employees. A few 
months earlier, Sew What? had received an SMB 20 Award 
from PC Magazine, which honors 20 of the most technologi- 
cally innovative small- and medium-sized businesses (SMBs) 
each year. “Small and medium businesses drive today’s econ- 
omy. However, they often don’t get the attention and recog- 
nition they deserve,” said PC Magazine’s Editor-in-Chief, Jim 
Louderback. “We want to highlight the hard work, techno- 
logical leadership, and innovative spirit of thousands of SMB 
companies throughout the world.” 

Duckett plans to use her prize winnings to add a bar 
code system that can track the manufacturing process at the 
company’s warehouse. In the drapery business, fabric is 
stored on a roll in the warehouse and then moves through 
different stages: receiving, cutting, sewing, shipping, and so 
forth. The scanning process will enable Duckett’s team to 
track how long the fabric stays in any given stage. These data 
will give them a better idea of their costs, which will then 
help them produce more accurate price lists. 

“We don’t need to charge an hour and a half for labor if 
the cutting only takes an hour and 15 minutes,” Duckett 
notes. Currently, the company uses a handwritten system of 
sign-in and sign-out sheets that, she says, takes too long and 
introduces too many errors. “The new system will also let us 
track the progress of individual orders,” she promises. “We’ll 
be able to provide better service by keeping the customer 
updated.” 


Source: Adapted from Lauren Simonds, “Pay Attention to the Woman 
Behind the Curtain,” Small BusinessComputing.com, July 21, 2006. 


REAL WORLD ACTIVITIES 


1. Search the Internet to help you evaluate the business 
performance of Sew What? Inc. and its competitors at 
the present time. What conclusions can you draw from 
your research about Sew What?’s prospects for the 
future? Report your findings and recommendations 
for Sew What?’s continued business success to the class. 


2. Small businesses have been slower to integrate informa- 
tion technology into their operations than larger com- 
panies. Break into small groups with your classmates to 
discuss the reasons for this state of affairs, identifying 
several possible IT solutions and their business benefits 
that could help small businesses become more successful. 


COMPETING WITH 


Business Information 

Applications Technologies 
Foundation 
Concepts 


INFORMATION TECHNOLOGY 


Section I 

Fundamentals of Strategic Advantage 
Strategic IT 

Competitive Strategy Concepts 


Real World Case: IT Leaders: Reinventing IT as a 
Strategic Business Partner 


Strategic Uses of Information Technology 

Building a Customer-Focused Business 

The Value Chain and Strategic IS 

Section II 

Using Information Technology for Strategic 
Advantage 

Strategic Uses of IT 

Reengineering Business Processes 


Real World Case: For Companies Both Big and Small: 


Running a Business on Smartphones 
Becoming an Agile Company 

Creating a Virtual Company 

Building a Knowledge-Creating Company 


Real World Case: Wachovia and Others: Trading 
Securities at the Speed of Light 


. Identify several basic competitive strategies and 


explain how they use information technologies 
to confront the competitive forces faced by a 
business. 


. Identify several strategic uses of Internet tech- 


nologies and give examples of how they can help 
a business gain competitive advantages. 


. Give examples of how business process reengi- 


neering frequently involves the strategic use of 
Internet technologies. 


. Identify the business value of using Internet tech- 


nologies to become an agile competitor or form 
a virtual company. 


. Explain how knowledge management systems can 


help a business gain strategic advantages. 
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Strategic IT 


Competitive 
Strategy 
Concepts 


Competitive Forces 
and Strategies 


Fundamentals of Strategic 
Advantage 


Technology is no longer an afterthought in forming business strategy, but the actual cause 
and driver. 


This chapter will show you that it is important to view information systems as 
more than a set of technologies that support efficient business operations, workgroup 
and enterprise collaboration, or effective business decision making. Information tech- 
nology can change the way businesses compete. You should also view information 
systems strategically, that is, as vital competitive networks, as a means of organiza- 
tional renewal, and as a necessary investment in technologies; such technologies help 
a company adopt strategies and business processes that enable it to reengineer or rein- 
vent itself to survive and succeed in today’s dynamic business environment. 

Section I of this chapter introduces fundamental competitive strategy concepts that 
underlie the strategic use of information systems. Section II then discusses several ma- 
jor strategic applications of information technology used by many companies today. 

Read the Real World Case regarding the competitive advantages of IT. We can 
learn a lot about the strategic business uses of information technologies from this case. 
See Figure 2.1. 


In Chapter 1, we emphasized that a major role of information systems applications in 
business is to provide effective support of a company’s strategies for gaining competi- 
tive advantage. This strategic role of information systems involves using information 
technology to develop products, services, and capabilities that give a company major 
advantages over the competitive forces it faces in the global marketplace. 

This role is accomplished through a strategic information architecture: the collec- 
tion of strategic information systems that supports or shapes the competitive position 
and strategies of a business enterprise. So a strategic information system can be any 
kind of information system (e.g., TPS, MIS, and DSS) that uses information technol- 
ogy to help an organization gain a competitive advantage, reduce a competitive disad- 
vantage, or meet other strategic enterprise objectives. 

Figure 2.2 illustrates the various competitive forces a business might encounter, as 
well as the competitive strategies that can be adopted to counteract such forces. It is 
important to note that the figure suggests that any of the major strategies may be 
deemed useful against any of the common competitive forces. Although it is rare and 
unlikely that a single firm would use all strategies simultaneously, each has value in 
certain circumstances. For now, it is only important that you become familiar with the 
available strategic approaches. Let us look at several basic concepts that define the role 
of competitive strategy as it applies to information systems. 


How should a business professional think about competitive strategies? How can a 
business use information systems to apply competitive strategies? Figure 2.2 illustrates 
an important conceptual framework for understanding forces of competition and the 
various competitive strategies employed to balance them. 

A company can survive and succeed in the long run only if it successfully devel- 
ops strategies to confront five competitive forces that shape the structure of compe- 
tition in its industry. In Michael Porter’s classic model of competition, any business 
that wants to survive and succeed must effectively develop and implement strategies 
to counter (1) the rivalry of competitors within its industry, (2) the threat of new entrants 
into an industry and its markets, (3) the threat posed by substitute products that might 
capture market share, (4) the bargaining power of customers, and (5) the bargaining power 


of suppliers. 


REAL WORLD 


IO Steve Olive isn’t handing out any gold stars to 
IT for providing good PC support or networking 
service at Raytheon Integrated Defense Systems. 
“Consistently reliable and excellent IT service should be a 
given,” he says. “What businesses need and IT should be 
providing are innovative solutions to business challenges.” 
That means creatively applying technology to produce goods 
more efficiently and at a lower cost, to sell and service more 
of them, and to do so at the highest possible profit margins. 

It also means using IT to create new products and services 
and even whole new business models, says Darryl Lemecha, CIO 
at ChoicePoint Inc. Because technology is embedded in just 
about everything a company does, “technology strategy and busi- 
ness strategy are now one.” Kathleen McNulty, CIO at The 
Schwan Food Co., puts it this way: “It’s not about IT automating 
the business anymore. It’s about innovating it, improving it.” So 
forget about IT supporting the business. IT leaders are focused 
on reinventing the business, starting with the IT organization. 

Their timing couldn’t be better. According to Gartner 
Inc., within five years, 60 percent of chief executives will 
make their CIOs responsible for using information as a stra- 
tegic (read: revenue-generating) asset. Gartner also predicts 
that 40 percent of CEOs will make CIOs responsible for 
business model innovation. 

TT executives such as John Hinkle at Trans World Entertain- 
ment Corp., Patrick Bennett at E! Entertainment ‘Television 
Inc., and Filippo Passerini at the Procter & Gamble Co. are all 
over this trend already. They are completely transforming their 
IT organizations, and everything is up for radical change, from 
how and where IT is housed within their companies to IT job 
titles. IT duties increasingly involve responsibility for business 
processes as well as the technology that supports them. Also up 
for reinvention is how IT value is measured. 


FIGURE 2.1 


IT organizations are being called in to innovate 
and improve business processes as equal partners. 


Source: Getty Images. 
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IT Leaders: Reinventing IT 
as a Strategic Business Partner 


“If you want to drive a significant amount of behavioral 
change in an organization, it takes some big swings,” says Hin- 
kle. “Maybe that means dramatic structural change or changing 
what people do.” At Trans World, it involved all of the above. 

One of the first things Hinkle did when he came to Trans 
World from General Electric was abolish the title of analyst and 
move people in that role into the project management office 
(PMO), which oversees all technology and business projects, as 
well as all business process changes for the company’s 800 music 
stores. Project managers have developed expertise and a special 
rapport with the specific business functions to which they are ded- 
icated. New projects and even systems changes go through the 
PMO, which uses Six Sigma project management processes. 

As CIO, Hinkle oversees the PMO, is a member of the 
company’s executive board, and is deeply entrenched in all 
business decisions. “I’m involved in merchandising, store 
planning and in every other core strategic meeting at the 
company,” Hinkle says. “I’m expected to be very well versed 
in these things, and I’m also expected to answer more than 
the IT questions. I’m part of the strategy brainstorming.” 

Hinkle expects his IT team to be equally well versed in 
business processes, which is why every IT staffer spends a 
minimum of three days in the field every year, working in a 
store, a warehouse, or a department such as finance or pay- 
roll. “That way, they know what the business really needs 
and how to help,” he says. “You don’t have a supply chain 
system or financial system that works in a box or a point-of- 
sale system that just takes money. Now we have highly inte- 
grated data flows, so every project requires an understanding 
of all systems and all business areas.” By knowing the busi- 
ness, “they better understand why they might get a call for 
support at 1:00 in the morning,” he adds. 

At ChoicePoint, Lemecha created a federated structure 
with two bands of IT positions: one for technical workers, 
who hold the title of IT architect; and one for managers, who 
hold the title of business information officer (BPO). “We be- 
lieve in two independent career paths. Just because you don’t 
manage people doesn’t mean you should be limited in how 
far you go in the company,” he says. 

‘The BIOs are embedded in each of ChoicePoint’s busi- 
nesses and act as local CIOs. “They understand the opera- 
tional issues, they know all of the people, and they spend 
100% of their time in the business units,” where they can 
directly affect business-IT alignment, Lemecha says. “They 
know and understand the business because they live in the 
business,” he says. The chief benefit of this arrangement is 
“when you fix the alignment problems, you do the right IT 
projects and, ultimately, impact revenue and get better cus- 
tomer service,” Lemecha says. ChoicePoint’s consistent rev- 
enue growth, ranging between 5 percent and 15 percent 
annually for the past several years, is no coincidence. 

At Cincinnati-based Procter & Gamble (P&G), the com- 
pany’s top IT project over the past three years has been to 
reinvent IT itself according to a four-year strategic alignment 
plan. “In the last year, we reshaped, renamed, refocused and 


46 © Module I / Foundation Concepts 


began retraining our 2,500-person IT team,” says Passerini, 
who is global business services officer in addition to CIO. 
The IT department was renamed Information & Decision 
Solutions (IDS). The new IDS group was then merged into 
P&G's Global Business Services shared-services organiza- 
tion, which is also home to the human resources, finance, 
strategic planning, and relocation functions. IDS staffers fo- 
cus on high-level, [T-enabled business projects exclusively; 
routine IT tasks are outsourced to Hewlett-Packard Co. un- 
der a 10-year, $3 billion agreement signed in 2003. 

Passerini has charged IDS with the same three business 
goals of every other P&G business unit: to increase profits, 
market share, and volume. To accomplish this, IDS focuses on 
three key tactics: getting and distributing data faster, innovating 
and speeding the ways in which P&G gets products to market, 
and applying “consumer-friendly” techniques to delivering new 
IT products and services to P&G’s internal user base. For ex- 
ample, IDS has developed a virtual modeling process and simu- 
lation techniques that allow package design, consumer testing, 
product testing, and even new manufacturing techniques to be 
developed and tested in a fully virtual environment, dramati- 
cally accelerating the cycle time for new products. 

“When we have new products, we can build virtual retail 
shelves and even show our competitors’ products on them. 
More importantly, we can build our products to the scale of 
different retailers’ shelves. This is all about building business 
capabilities for P&G,” Passerini says. “The whole idea is 
running IT as a business, but not necessarily using [tradi- 
tional return-on-investment] financial measures to quantify 
IT’s value,” he says. “In the end, no one believes those num- 
bers anyhow. The numbers you want are higher profits, 
market share, and volumes. In reality, it’s all about the rele- 
vancy of IT’s contribution to the business,” Passerini adds. 
That is how IT’s value is measured at P&G. 

E! Entertainment Television in Los Angeles has radically 
departed from its traditional model of separate IT and tele- 
vision broadcast operations. ‘The change coincides with the 
broadcast side’s shift from tape to digital technology. Before, 
separate vice presidents oversaw online, television network, 
and IT operations. Now there is a single senior vice presi- 
dent of technology and operations, and ideas, designs, tech- 
nology, and projects are shared among all three operations. 


CASE STUDY QUESTIONS 


1. What are the business and political challenges that are 
likely to occur as a result of the transformation of IT 
from a support activity to a partner role? Use examples 
from the case to illustrate your answer. 

2. What implications does this shift in the strategic out- 
look of IT have for traditional IT workers and for the 
educational institutions that train them? How does this 
change the emphasis on what knowledge and skills the 
IT person of the future should have? 


3. To what extent do you agree with the idea that technol- 
ogy is embedded in just about everything a company 
does? Provide examples, other than those included in 
the case, of recent product introductions that could not 
have been possible without heavy reliance on IT. 


For example, IT personnel were involved in the design of 
E! Online content from the time the site was first launched in 
October 2006, notes Bennett, executive director of business 
applications. “Before, we would have gotten the specs and built 
it much like a contractor,” he says. “But now, IT was in on 
branding discussions and audience focus groups from the be- 
ginning. “What we’ve done is flatten the more formal [software 
development] processes and made them more person-to- 
person” as a way to develop products and services faster across 
all media, Bennett says. “As we interact with executives and 
users and release software iteratively, we’re also gaining greater 
domain knowledge about the business,” he notes. 

Just recently, IT participated in a discussion about offering 
an online feature that would let Web viewers of E! Online vote 
on whether celebrities on the red carpet at the Golden Globe 
and Oscar celebrations are hot or not. “Now that’s not a tradi- 
tional discussion or conversation you would have in IT,” 
Bennett notes wryly, “but now we’re thinking about these kinds 
of things across all media.” Under the new organizational struc- 
ture, “there’s constant interaction and exchange of information 
and ideas through human contact. As opposed to being as- 
signed to a user department, IT is constantly interacting across 
media,” he says. “You’re more of a partner with the business. 
You're creating products together. IT is definitely stepping out 
from behind the shadows of backoffice corporate systems.” 

“Tt’s very much a different mind-set,” says Raytheon’s 
Olive, whose overhauled IT organization now includes custo- 
mer relationship managers who are embedded in the business, 
plus 10 teams of technical workers who support IT frameworks 
such as infrastructure, application support, and desktop ser- 
vices. The vast majority of those technical workers are “home- 
roomed” in cross-business teams that work on projects that 
the customer relationship managers bring to them, he notes. 

“Tt took two years for this model to really jell. At first, there 
was a little bit of tension while the clarity of roles and responsi- 
bilities was a little confusing,” Olive acknowledges. “But once 
we defined roles and responsibilities, it improved morale and 
worked to create a highly motivated workforce because we were 
making higher-level contributions to the business.” 


Source: Adapted from Julia King, “How IT Is Reinventing Itself as a Strategic 
Business Partner,” Computerworld, February 19, 2007. 


REAL WORLD ACTIVITIES 


1. Search the Internet to find information about other 


firms that have transformed their IT organizations and 
the role that the CIO plays in the governance structure 
of the organization. What benefits have they been able 
to derive from these changes? Prepare a report and 
present your findings to your class. 

2. Consider the virtual reality technologies employed by 
Procter & Gamble and described in this case. Break 
into small groups and brainstorm applications of these 
types of technologies for companies in industries other 
than those reviewed in the case. 


FIGURE 2.2 


Businesses can develop 
competitive strategies 

to counter the actions of 
the competitive forces they 


confront in the marketplace. 
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Competitive Forces 


Competition is a positive characteristic in business, and competitors share a natural, 
and often healthy, rivalry. This rivalry encourages and sometimes requires a constant 
effort to gain competitive advantage in the marketplace. This ever-present competitive 
force requires significant resources on the part of a firm. 

Guarding against the threat of new entrants also requires the expenditure of sig- 
nificant organizational resources. Not only do firms need to compete with other 
firms in the marketplace, but they must also work to create significant barriers to the 
entry of new competition. This competitive force has always been difficult to manage, 
but it is even more so today. The Internet has created many ways to enter the market- 
place quickly and with relatively low cost. In the Internet world, a firm’s biggest 
potential competitor may be one that is not yet in the marketplace but could emerge 
almost overnight. 

The threat of substitutes is another competitive force that confronts a business. 
The effect of this force is apparent almost daily in a wide variety of industries, often at 
its strongest during periods of rising costs or inflation. When airline prices get too 
high, people substitute car travel for their vacations. When the cost of steak gets too 
high, people eat more hamburger and fish. Most products or services have some sort 
of substitute available to the consumer. 

Finally, a business must guard against the often opposing forces of customer and 
supplier bargaining powers. If customers’ bargaining power gets too strong, they can 
drive prices to unmanageably low levels or just refuse to buy the product or service. If 
a key supplier’s bargaining power gets too strong, it can force the price of goods and 
services to unmanageably high levels or just starve a business by controlling the flow 
of parts or raw materials essential to the manufacture of a product. 

Figure 2.2 also illustrates that businesses can counter the threats of competitive forces 
that they face by implementing one or more of the five basic competitive strategies. 
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Strategic Uses 
of Information 
Technology 


Other Strategic 
Initiatives 


e Cost Leadership Strategy. Becoming a low-cost producer of products and ser- 
vices in the industry or finding ways to help suppliers or customers reduce their 
costs or increase the costs of competitors. 


e Differentiation Strategy. Developing ways to differentiate a firm’s products and 
services from those of its competitors or reduce the differentiation advantages of 
competitors. This strategy may allow a firm to focus its products or services to 
give it an advantage in particular segments or niches of a market. 


e Innovation Strategy. Finding new ways of doing business. This strategy may 
involve developing unique products and services or entering unique markets or 
market niches. It may also involve making radical changes to the business proc- 
esses for producing or distributing products and services that are so different 
from the way a business has been conducted that they alter the fundamental 
structure of an industry. 


e Growth Strategies. Significantly expanding a company’s capacity to produce 
goods and services, expanding into global markets, diversifying into new products 
and services, or integrating into related products and services. 


e Alliance Strategies. Establishing new business linkages and alliances with cus- 
tomers, suppliers, competitors, consultants, and other companies. These linkages 
may include mergers, acquisitions, joint ventures, forming of “virtual companies,” 
or other marketing, manufacturing, or distribution agreements between a busi- 
ness and its trading partners. 


One additional point regarding these strategies is that they are not mutually exclusive. 
An organization may make use of one, some, or all of the strategies in varying degrees 
to manage the forces of competition. Therefore, a given activity could fall into one or 
more of the categories of competitive strategy. For example, implementing a system 
that allows customers to track their order or shipment online could be considered a 
form of differentiation if the other competitors in the marketplace do not offer this 
service. If they do offer the service, however, online order tracking would not serve to 
differentiate one organization from another. 

If an organization offers its online package tracking system in a manner that allows 
its customers to access shipment information via not only a computer but a mobile 
phone as well, then such an action could fall into both the differentiation and innova- 
tion strategy categories. Think of it this way: Not everything innovative will serve to 
differentiate one organization from another. Likewise, not everything that serves to 
differentiate organizations is necessarily viewed as innovative. These types of observa- 
tions are true for any combination of the competitive strategies, thus making them 
complementary to each other rather than mutually exclusive. 


How can business managers use investments in information technology to support a 
firm’s competitive strategies? Figure 2.3 answers this question with a summary of the 
many ways that information technology can help a business implement the five basic 
competitive strategies. Figure 2.4 provides examples of how specific companies have 
used strategic information systems to implement each of these five basic strategies for 
competitive advantage. Note the major use of Internet technologies for e-business and 
e-commerce applications. In the rest of this chapter, we discuss and provide examples 
of many strategic uses of information technology. 


There are many strategic initiatives available to a firm in addition to the five basic 
strategies of cost leadership, differentiation, innovation, growth, and alliance. Let’s 
look at several key strategies that also can be implemented with information technol- 
ogy. They include locking in customers or suppliers, building switching costs, raising 
barriers to entry, and leveraging investment in information technology. 


FIGURE 2.3 


A summary of how 
information technology can 
be used to implement the 
five basic competitive 
strategies. Many companies 
are using Internet 
technologies as the 
foundation for such 
strategies. 
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Basic Strategies in the Business Use of Information Technology 


Lower Costs 
e Use IT to substantially reduce the cost of business processes. 


e Use IT to lower the costs of customers or suppliers. 


Differentiate 
e@ Develop new IT features to differentiate products and services. 


e Use IT features to reduce the differentiation advantages of competitors. 


e Use IT features to focus products and services at selected market niches. 


Innovate 
© Create new products and services that include IT components. 


e Develop unique new markets or market niches with the help of IT. 


e Make radical changes to business processes with IT that dramatically cut costs; 
improve quality, efficiency, or customer service; or shorten time to market. 


Promote Growth 
e Use IT to manage regional and global business expansion. 


e Use IT to diversify and integrate into other products and services. 


Develop Alliances 
© Use IT to create virtual organizations of business partners. 


© Develop interenterprise information systems linked by the Internet and extranets 
that support strategic business relationships with customers, suppliers, subcontractors, 


and others. 


FIGURE 2.4 Examples of how, over time, companies have used information technology to implement five competitive 


strategies for strategic advantage. 


Strategic Use of 
Strategy Company Information Technology Business Benefit 
Cost Leadership Dell Computer Online build to order Lowest-cost producer 
Priceline.com Online seller bidding Buyer-set pricing 
eBay.com Online auctions Auction-set prices 
Differentiation AVNET Marshall Customer/supplier of Increase in market share 
e-commerce 
Moen Inc. Online customer design Increase in market share 
Consolidated Freightways Customer online shipment tracking Increase in market share 
Innovation Charles Schwab & Co. Online discount Market leadership 
stock trading 
Federal Express Online package tracking and Market leadership 
flight management 
Amazon.com Online full-service Market leadership 
customer systems 
Growth Citicorp Global intranet Increase in global market 
Wal-Mart Merchandise ordering by Market leadership 
global satellite network 
Toys ‘R’ Us Inc. POS inventory tracking Market leadership 
Alliance Wal-Mart/Procter & Automatic inventory Reduced inventory 
Gamble replenishment by supplier cost/increased sales 


Cisco Systems 


Staples Inc. 
and Partners 


Virtual manufacturing 
alliances 

Online one-stop 
shopping with partners 


Agile market 
leadership 
Increase in market share 
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FIGURE 2.5 Additional ways that information technology can be used to implement competitive strategies. 


customers or suppliers. 


applications. 


e Develop interenterprise information systems whose convenience and efficiency create switching costs that lock in 


e Make major investments in advanced IT applications that build barriers to entry against industry competitors or outsiders. 
e Include IT components in products and services to make substitution of competing products or services more difficult. 


e Leverage investment in IS people, hardware, software, databases, and networks from operational uses into strategic 


Other Strategic Uses of Information Technology 


Timex: Ticking 
with Product 
Innovation 
Software 


Investments in information technology can allow a business to lock in customers 
and suppliers (and lock out competitors) by building valuable new relationships with 
them. These business relationships can become so valuable to customers or suppliers 
that they deter them from abandoning a company for its competitors or intimidate 
them into accepting less profitable business arrangements. Early attempts to use infor- 
mation systems technology in these relationships focused on significantly improving 
the quality of service to customers and suppliers in a firm’s distribution, marketing, 
sales, and service activities. More recent projects characterize a move toward more in- 
novative uses of information technology. 

A major emphasis in strategic information systems has been to find ways to create 
switching costs in the relationships between a firm and its customers or suppliers. In 
other words, investments in information systems technology, such as those mentioned 
in the Timex example, can make customers or suppliers dependent on the continued 
use of innovative, mutually beneficial interenterprise information systems. They then 
become reluctant to pay the costs in time, money, effort, and inconvenience that it 
would take to switch to a company’s competitors. 

By making investments in information technology to improve its operations or 
promote innovation, a firm could also raise barriers to entry that would discourage or 
delay other companies from entering a market. Typically, these barriers increase the 
amount of investment or the complexity of the technology required to compete in an 
industry or a market segment. Such actions tend to discourage firms already in the 
industry and deter external firms from entering the industry. 

Investing in information technology enables a firm to build strategic IT capabili- 
ties so that they can take advantage of opportunities when they arise. In many cases, 
this happens when a company invests in advanced computer-based information sys- 
tems to improve the efficiency of its own business processes. Then, armed with this 
strategic technology platform, the firm can leverage investment in IT by developing 
new products and services that would not be possible without a strong IT capability. 
An important current example is the development of corporate intranets and extranets 
by many companies, which enables them to leverage their previous investments in 
Internet browsers, PCs, servers, and client/server networks. Figure 2.5 summarizes 
the additional strategic uses of IT we have just discussed. 


To keep itself ticking, Timex Corp. has revamped the way it develops wristwatches 
with product innovation software that can help it quickly tailor new products for a 
rapidly changing market. For much of the company’s 152 years, the watch industry 
was more about style than engineering, said Bernd Becker, vice president of product 
development at Timex. But in the “last 10 years, innovation has become the industry 
buzzword as consumers demand new features in their watches.” Keeping track of 
those innovations and making them easier to build into products is now a key to stay- 
ing competitive. 


Competitive 
Advantage and 
Competitive 
Necessity 
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‘To that end, the company adopted a “stage-gate” approach from software vendor 
Sopheon PLC that uses milestones or “gates” at each step of the innovation process. 
It allows discussions, reviews, planning, and decisions to be analyzed by everyone 
from designers and engineers to product marketing staffers. The chosen product, 
Accolade, brings together cross-functional team members, from brand managers to 
engineers to manufacturing staff and finance specialists, on a global design project. 
The software helps organize information in a central database so that decisions can 
be made on whether to grow or kill a project. This kind of decision-making aspect of 
the software is one of the key ways by which Timex increases returns on innovation. 

“In product development, you always have a large dose of uncertainty to man- 
age,” says development analyst Vasco Drecun. “The problem is that most companies 
use methods all developed from the Industrial Age, when things were more predict- 
able. Those things are gone.” 

Better knowledge about products, market demand, production requirements, and 
other variables are essential for a company to remain competitive. “Knowledge will 
help you manage the risk,” says Drecun. Using applications like Accolade helps com- 
panies maintain a high innovation level in their portfolio. 


Source: Adapted from Todd Weiss, “Timex Ticking with New Product Innovation Software,” Computerworld, June 20, 2006. 


The constant struggle to achieve a measurable competitive advantage in an industry 
or marketplace occupies a significant portion of an organization’s time and money. 
Creative and innovative marketing, research and development, and process reengi- 
neering, among many other activities, are used to gain that elusive and sometimes 
indescribable competitive advantage over rival firms. 

The term competitive advantage is often used when referring to a firm that is lead- 
ing an industry in some identifiable way such as sales, revenues, or new products. In 
fact, the definition of the term suggests a single condition under which competitive 
advantage can exist: when a firm sustains profits that exceed the average for its industry, 
the firm is said to possess competitive advantage over its rivals. In other words, competi- 
tive advantage is all about profits. Granted, sales, revenues, cost management, and 
new products all contribute in some way to profits, but unless the contribution re- 
sults in sustained profits above the average for the industry, no measurable competi- 
tive advantage has been achieved. The real problem with a competitive advantage, 
however, is that it normally doesn’t last very long and is generally not sustainable 
over the long term. Figure 2.6 illustrates this cycle. Once a firm figures out how to 
gain an advantage over its competitors (normally through some form of innovation), 
the competitors figure out how it was done through a process referred to as organi- 
zational learning. To combat the competitive advantage, they adopt the same, or 
some similar, innovation. Once this occurs, everyone in the industry is doing what 
everyone else is doing; what was once a competitive advantage is now a competitive 
necessity. Once a strategy or action becomes a competitive necessity, instead of creat- 
ing an advantage, the strategy or action becomes necessary to compete and do busi- 
ness in the industry. When this happens, someone has to figure out a new way to 
gain a competitive edge, and the cycle starts all over again. 

Every organization is looking for a way to gain competitive advantage, and many 
have successfully used strategic information systems to help them achieve it. The 
important point to remember is that no matter how it is achieved, competitive ad- 
vantage doesn’t last forever. Arie de Geus, head of strategic planning for Royal Dutch 
Shell, thinks there may be one way to sustain it: “The ability to learn faster than your 
competitors may be the only sustainable competitive advantage in the future.” 
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FIGURE 2.6 


The move from innovation 
to competitive advantage 
quickly becomes 
competitive necessity when 
other firms learn how to 
respond strategically. 
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Buildin ga The driving force behind world economic growth has changed from manufacturing vol- 
Customer ume to improving customer value. As a result, the key success factor for many firms is 


maximizing customer value. 
Focused oe . 
> For many companies, the chief business value of becoming a customer-focused 
Business business lies in its ability to help them keep customers loyal, anticipate their future 
needs, respond to customer concerns, and provide top-quality customer service. This 
strategic focus on customer value recognizes that quality, rather than price, has be- 
come the primary determinant in a customer’s perception of value. Companies that 
consistently offer the best value from the customer’s perspective are those that keep 
track of their customers’ individual preferences; keep up with market trends; supply 
products, services, and information anytime and anywhere; and provide customer 
services tailored to individual needs. Thus, Internet technologies have created a stra- 
tegic opportunity for companies, large and small, to offer fast, responsive, high-quality 
products and services tailored to individual customer preferences. 

Internet technologies can make customers the focal point of customer relationship 
management (CRM) and other e-business applications. In combination, CRM systems 
and Internet, intranet, and extranet Web sites create new channels for interactive com- 
munications within a company, as well as communication with customers, suppliers, 
business partners, and others in the external environment. Such communications en- 
able continual interaction with customers by most business functions and encourage 
cross-functional collaboration with customers in product development, marketing, de- 
livery, service, and technical support. We will discuss CRM systems in Chapter 8. 

‘Typically, customers use the Internet to ask questions, lodge complaints, evaluate 
products, request support, and make and track their purchases. Using the Internet and 
corporate intranets, specialists in business functions throughout the enterprise can con- 
tribute to an effective response. This ability encourages the creation of cross-functional 
discussion groups and problem-solving teams dedicated to customer involvement, ser- 
vice, and support. Even the Internet and extranet links to suppliers and business partners 
can be used to enlist them in a way of doing business that ensures the prompt delivery 
of quality components and services to meet a company’s commitments to its customers. 
This process is how a business demonstrates its focus on customer value. 

Figure 2.7 illustrates the interrelationships in a customer-focused business. Intra- 
nets, extranets, e-commerce Web sites, and Web-enabled internal business processes 
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FIGURE 2.7 How a customer-focused business builds customer value and loyalty using 
Internet technologies. 
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form the invisible IT platform that supports this e-business model. The platform en- 
ables the business to focus on targeting the kinds of customers it really wants and “own- 
ing” the customer’s total business experience with the company. A successful business 
streamlines all business processes that affect its customers and develops CRM systems 
that provide its employees with a complete view of each customer, so they have the 
information they need to offer their customers top-quality personalized service. A 
customer-focused business helps its e-commerce customers help themselves while also 
helping them do their jobs. Finally, a successful business nurtures an online commu- 
nity of customers, employees, and business partners that builds great customer loyalty 
as it fosters cooperation to provide an outstanding customer experience. Let’s review a 
real-world example. 


Universal Orlando: Michelle McKenna is the CIO of Universal Orlando Resort, but also a mother of 
IT Dedson two and the planner of family vacations. l 

i a In fact, she thinks of herself first as a theme park customer, second as a senior 
Driven by leader at Universal, and finally as the company’s CIO. “Recently we were brainstorm- 
Customer Data ing new events that would bring more Florida residents to our theme parks during 


off-peak tourist periods. Our in-house marketing group was pitching proposals, and 
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I offered the idea of a Guitar Hero competition. Everyone loved it. But that idea 
didn’t come from being a CIO—it came from being a mother of two,” she says. 

“Thinking like our customers and focusing on our company’s markets are among 
the most important ways we can fulfill our responsibility to contribute to informed 
decision making,” says McKenna. Moving forward, it’s more critical than ever for 
CIOs to study market trends and find ways to maximize business opportunities. 

Universal Orlando is one of many brands in the travel and entertainment indus- 
try competing for discretionary dollars spent by consumers on leisure time and vaca- 
tions. Of course, the competition boils down to a market of one—the individual 
consumer. People often assume that because of the high volume of guests, the expe- 
rience at Universal Orlando has to be geared for the masses. But digital technology 
now enables guests to customize their experience. For example, the new Hollywood 
Rip Ride RocklIt Roller Coaster will allow guests to customize their ride experience 
by choosing the music that plays around them while on the roller coaster. When the 
ride ends, guests will be able to edit video footage of that experience into a music 
video to keep, share with friends, or post online. 

Any CIO can take a few steps to get market savvy. Management gets weekly data 
about what happened in the park and what the spending trends are per guest. CIOs 
should get copied on any reports like that. They should study them and look for pat- 
terns. “Don’t be afraid to ask questions about it; give yourself permission to be a 
smart (and inquisitive) businessperson. When I first joined the company and asked 
about market issues, people looked at me and thought, ‘Why did she ask that? It 
doesn’t have anything to do with technology.’ Over time they realized that I needed 
to understand our data in order to do my job,” says McKenna. 

Knowledge of market data helps Universal Orlando drill down to understand 
what is really happening in business. For example, trends indicated that annual pass 
holders—Florida residents, primarily—spend less on food, merchandise, and other 
items than day-pass guests. 

It turned out that some pass holders do spend on par with day guests, particularly 
when they attend special events, Mardi Gras and Halloween Horror Nights. “This 
analysis showed that we needed to segment those annual pass holders more deeply in 
order to better understand them and market to them. So we are building a new data 
warehouse and business intelligence tools that will calculate spending by hour and by 
pass type. The initiative started in IT, and we can find many similar opportunities if 
we look at market details and ask questions,” McKenna says. 


Source: Adapted from Michelle McKenna, “Customer Data Should Drive IT Decisions,” CIO Magazine, June 2, 2008. 


Let’s look at another important concept that can help you identify opportunities for 
strategic information systems. The value chain concept, developed by Michael Porter, 
is illustrated in Figure 2.8. It views a firm as a series, chain, or network of basic activi- 
ties that add value to its products and services and thus add a margin of value to both 
the firm and its customers. In the value chain conceptual framework, some business 
activities are primary processes; others are support processes. Primary processes are 
those business activities that are directly related to the manufacture of products or the 
delivery of services to the customer. In contrast, support processes are those business 
activities that help support the day-to-day operation of the business and that indirectly 
contribute to the products or services of the organization. This framework can high- 
light where competitive strategies can best be applied in a business. So managers and 
business professionals should try to develop a variety of strategic uses of the Internet 
and other technologies for those basic processes that add the most value to a compa- 
ny’s products or services and thus to the overall business value of the company. 
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FIGURE 2.8 The value chain of a firm. Note the examples of the variety of strategic information systems that can 
be applied to a firm’s basic business processes for competitive advantage. 
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Figure 2.8 provides examples of how and where information technologies can be ap- 
plied to basic business processes using the value chain framework. For example, the 
figure illustrates that collaborative workflow intranets can increase the communica- 
tions and collaboration required to improve administrative coordination and support 
services dramatically. An employee benefits intranet can help the human resources 
management function provide employees with easy, self-service access to their benefits 
information. Extranets enable a company and its global business partners to use the 
Web to design products and processes jointly. Finally, e-commerce Web portals can 
dramatically improve procurement of resources by providing online marketplaces for 
a firm’s suppliers. 

The value chain model in Figure 2.8 also identifies examples of strategic applica- 
tions of information systems technology to primary business processes. These include 
automated just-in-time warehousing systems to support inbound logistic processes 
that involve inventory storage, computer-aided flexible manufacturing systems, as well 
as online point-of-sale and order processing systems to improve the outbound logis- 
tics processes that handle customer orders. Information systems can also support mar- 
keting and sales processes by developing an interactive targeted marketing capability 
on the Internet and the Web. Finally, a coordinated and integrated customer relation- 
ship management system can dramatically improve customer service. 

Thus, the value chain concept can help you identify where and how to apply the 
strategic capabilities of information technology. It shows how various types of infor- 
mation technologies might be applied to specific business processes to help a firm gain 
competitive advantages in the marketplace. 
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Organizations may view and use information technology in many ways. For exam- 
ple, companies may choose to use information systems strategically, or they may be 
content to use IT to support efficient everyday operations. If a company empha- 
sized strategic business uses of information technology, its management would view 
IT as a major competitive differentiator. They would then devise business strate- 
gies that use IT to develop products, services, and capabilities that give the com- 
pany major advantages in the markets in which it competes. In this section, we 
provide many examples of such strategic business applications of information tech- 
nology. See Figure 2.9. 

Read the Real World Case 2 about using information technology to redesign 
how a business works. We can learn a lot about the advantages gained through the 
appropriate use of information technology and mobile communications from 
this case. 


One of the most important implementations of competitive strategies is business 
process reengineering (BPR), often simply called reengineering. Reengineering is a 
fundamental rethinking and radical redesign of business processes to achieve dramatic 
improvements in cost, quality, speed, and service. BPR combines a strategy of promot- 
ing business innovation with a strategy of making major improvements to business 
processes so that a company can become a much stronger and more successful com- 
petitor in the marketplace. 

However, Figure 2.10 points out that although the potential payback of reengi- 
neering is high, so too is its risk of failure and level of disruption to the organizational 
environment. Making radical changes to business processes to dramatically improve 
efficiency and effectiveness is not an easy task. For example, many companies have 
used cross-functional enterprise resource planning (ERP) software to reengineer, au- 
tomate, and integrate their manufacturing, distribution, finance, and human resource 
business processes. Although many companies have reported impressive gains with 
such ERP reengineering projects, many others either have experienced dramatic fail- 
ures or did not achieve the improvements they sought. 

Many companies have found that organizational redesign approaches are an impor- 
tant enabler of reengineering, along with the use of information technology. For 
example, one common approach is the use of self-directed cross-functional or multi- 
disciplinary process teams. Employees from several departments or specialties, includ- 
ing engineering, marketing, customer service, and manufacturing, may work as a team 
on the product development process. Another example is the use of case managers, 
who handle almost all tasks in a business process instead of splitting tasks among many 
different specialists. 


Information technology plays a major role in reengineering most business processes. 
The speed, information-processing capabilities, and connectivity of computers and 
Internet technologies can substantially increase the efficiency of business processes, as 
well as communications and collaboration among the people responsible for their op- 
eration and management. For example, the order management process illustrated in 
Figure 2.11 is vital to the success of most companies. Many of them are reengineering 
this process with ERP software and Web-enabled e-business and e-commerce systems, 
as outlined in Figure 2.12. Let’s take a look at an example. 


REAL WORLD 


CASE 


n early 2006, San-Antonio, Texas-based CPS Energy, the 

nation’s largest municipally owned energy provider, was 

by all accounts riding the road to riches. The company 
had the highest bond ratings of any such utility provider. Its 
workforce and customer base in general expressed satisfac- 
tion. And most important, it was profitable. In other words, 
there were no external signs that the company was about to 
launch a technology program that would redefine the way it 
did business and reshape its workforce of roughly 4,000. 

There weren’t external signs, but for those in the know, 
including Christopher Barron, CPS Energy’s VP and CIO, it 
couldn’t have been more clear that a change was imminent— 
and that the future of the company might depend on it. 

“We had a much larger workforce than a business our 
size maybe should have,” Barron says. 

Barron looked at other companies with large mobile 
workforces like its own, companies like UPS and FedEx, and 
saw a huge disparity in the way his business was operating. 
For instance, specific CPS workers had little or no access to 
IT systems and resources while away from the office or 
warehouse. They were often required to visit work sites or 
customer locations to diagnose issues or suggest fixes before 
reporting back to the appropriate departments or parties, 
which would then initiate the next step of the resolution 
process. That could mean dispatching additional workers, 
and the whole ordeal could take days. 

“If we kept with the amount of manual labor that it took 
for us to accomplish that work, we would not be in the posi- 
tion to be competitive in the future,” Barron says. From this 
realization, the company’s Magellan Program was born. 


FIGURE 2.9 


Companies of all sizes can benefit from using 
smartphones to improve their business processes. 


Source: © The McGraw-Hill Companies Inc./John Flournoy. 
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For Companies Both Big and Small: 
Running a Business on Smartphones 


The Magellan Program was envisioned by Barron and his 
colleagues as a way to better mobilize and connect its tradi- 
tionally siloed workforce to the people and systems they 
needed to do their jobs. The goals of the program: extend 
CPS’s networking infrastructure, build its own secure Wi-Fi 
networks in offices and warehouses, and deploy smartphones 
and custom mobile applications to all CPS staffers who didn’t 
currently have a laptop or other mobile device. For Barron, 
the first and most significant challenge in deploying smart- 
phones to such a large user base was getting executive buy-in. 

“One of our biggest headaches has been, and continues 
to be, the perception that the technology brings little to the 
table other than e-mail, and it costs a lot,” Barron says. 

“For a CIO to try to eliminate all the resistance from a 
senior executive might take forever,” Barron says. “So rather 
than try to get to the execs and mollify all their fears about 
cost, usage and safety, we’ve gone to specific groups, engi- 
neers, line workers, office workers, and because it’s so cheap 
we’ve been able to give the devices out on ‘experimental ba- 
sis.’ There’s so much value in these handheld devices and two 
or three applications that they prove themselves,” he says. 
“You just have to get them into the hands of the people that 
actually need to use them in order to demonstrate that.” 

Three innovative ways CPS staffers employ their smart- 
phones are as digital cameras at work sites, as GPS tracking 
mechanisms, and as emergency notification receivers. In the 
past, CPS might have had to dispatch a small group of “gen- 
eralist” workers to a service call to make sure the correct 
person was there. Today, a single worker can visit a site, take 
a photo of a damaged piece of equipment or infrastructure, 
and then send it back to headquarters or the office. 

Then an expert diagnoses the issue and sends along in- 
structions to fix the problem or dispatches the appropriate 
worker—who’s available immediately via voice e-mail and 
SMS text via smartphone. 

“The Magellan Program, through the use of smartphones 
and other technology, has or will empower all employees, no 
matter what work they perform, to become part of the greater 
company’s ‘thought network,’” Barron says. “Each person is 
now like a node in our network.” The company is also seeing 
significant gains in supply chain efficiency related to Magellan 
and the smartphone deployment, he says. For instance, 
smartphones help speed up the purchase order process, be- 
cause in the past a specific person or group of people needed 
to be on-site to approve orders. Now the approvers can be 
practically anywhere with cellular coverage. The company’s 
supply chain buyers can also visit warehouses to work with 
the people who actually order parts, leading to faster order 
times and more proactive supply chain management overall. 
In just one year, the time it took to close purchasing and pro- 
curement deals decreased by more than 65 percent. Also, in- 
ventory levels were reduced by more than $8 million since 
the Magellan Program began. 
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In addition, both employee and customer satisfaction 
levels are up, Barron notes, because staffers now have more 
access to corporate systems and information and feel closer 
to the business. Because CPS can now resolve more cus- 
tomer issues with fewer processes, they’ve reduced the time 
it takes to complete most service calls, leading to happier 
customers. In fact, the company received the highest score 
in J.D. Power and Associates 2007 Gas Utility Residential 
Customer Satisfaction Survey. 

The technology, however, is no longer the exclusive pur- 
view of large companies with significant IT budgets, at least 
not anymore. Lloyd’s Construction in Eagan, Minnesota, 
might not seem as if it needs flashy phone software. The 
$9-million-a-year demolition and carting company has been 
run by the same family for the past 24 years. Lloyd’s takes 
down commercial and residential buildings, and then hauls 
them away. What could be more simple? That is, if wrangling 
100 employees, 30 trucks, and more than 400 dumpsters can 
be called simple. Coordinating those moving parts is crucial to 
growing the business—and to saving the sanity of Stephanie 
Lloyd, 41, who has run the company for the past four years. 
Until recently, Lloyd’s used a hodgepodge of spreadsheets, 
paper ledgers, and accounting software on company PCs to 
keep track of its workers and equipment. ‘Io make matters 
worse, the company used radios to coordinate with its work- 
ers on the job—and the more cell phone towers that came 
online in Minnesota, the worse Lloyd’s radio reception got. 
It was time, the Lloyds decided, to drag their company into 
the 21st-century world of smartphones. 

Lloyd’s considered a half-dozen mobile-productivity 
software suites before settling on eTrace, which happened to 
come from a company called GearWorks based just across 
town. Not only was GearWorks local, but its software worked 
on Sprint Nextel’s i560 and i850 phones, which are aimed at 
the construction industry. Lloyd’s had already started buying 
these push-to-talk phones to wean workers from their dying 
radios. Immediately, there were troubles with technophobic 
staff. Employees had to be guided up a steep learning curve 
in order to master even basic features on their new phones. 


CASE STUDY QUESTIONS 


1. In which ways do smartphones help these companies be 
more profitable? ‘To what extent are improvements in 
performance coming from revenue increases or cost re- 
ductions? Provide several examples from the case. 


2. The companies described in the case encountered a fair 
amount of resistance from employees when introducing 
smartphone technologies. Why do you think this hap- 
pened? What could companies do to improve the re- 
ception of these initiatives? Develop two alternative 
propositions. 

3. CPS Energy and Lloyd’s Construction used smart- 
phones to make existing processes more efficient. How 
could they have used the technology to create new 

products and services for their customers? Include at 

least one recommendation for each organization. 


For 18 months the two systems ran side by side: eTrace as it 
was phased in, and the old paper-and-pencil system as it was 
phased out. Accounting inconsistencies quickly crept in. 

And eTrace gave rise to a delicate labor problem. The 
software featured integrated mapping and travel data that 
showed the real-time locations of all company assets. To 
their chagrin, the Lloyds discovered that those assets were 
spending too much time parked outside the same lunch 
spots—ones that were not on prescribed routes. Lloyd was 
sympathetic to workers’ needs for breaks—“we’ve all worked 
demolition here,” she says—but quickly clamped down on 
unauthorized ones. 

GearWorks’ CEO says the challenges Lloyd’s faced are 
to be expected. “All these products operate under the omi- 
nous pendulum of challenge and opportunity,” says Todd 
Krautkremer, 47. “But our software does a good job of letting 
the customer control that rate of change in the business.” 

Once the deployment dust had settled, the savings be- 
came clear. The company employs 12 drivers, 22 foremen, 
and 7 office workers who use 41 phones running eTrace. The 
company buys an unlimited data package for each phone, 
which totals about $4,000 a month. Add other networking 
charges and Lloyd’s spends about $50,000 a year for a com- 
plete business, accounting, and communications solution. 

Before eTrace, the company paid an accountant 40 hours 
a week to do the books. Now that person comes in one day a 
week for 6 hours, saving roughly $1,000 a week. 

Data entry and job logging by the dispatcher and fore- 
men, Lloyd says, is roughly 1% times faster than paper and 
radio. More efficient routing has cut fuel costs by about 
30%. And employees have stopped making unauthorized 
stops. Lloyd estimates a net improvement in performance of 
10-12 percent, or roughly $1 million for 2007—not a bad 
return on $50,000. 

“Tt really does work,” she says. 


Source: Adapted from Jonathan Blum, “Running an Entire Business from 
Smartphones,” FORTUNE Small Business, March 12, 2008; and Al Sacco, 
“How Smartphones Help CPS Energy Innovate and Boost the Bottom 
Line,” CIO Magazine, July 11, 2008. 


REAL WORLD ACTIVITIES 


1. In addition to the companies featured in the case, 
others like FedEx and UPS, which have large mobile 
workforces, heavily use mobile communication technol- 
ogies. What other companies could benefit from these 
innovations? 


2. Go online and research uses of smartphones in indus- 
tries different from the ones reviewed here. Prepare a 
report to share your findings. 


3. Use the Internet to research the latest technological 
developments in smartphones, and discuss how those 
could be used by companies to deliver value to cus- 
tomers and shareholders. 


FIGURE 2.10 
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Business Business Process 
Some of the key ways that Improvement Reengineering 
business process 
reengineering differs from Level of Change Incremental Radical 
business improvement. Process Improved new Brand-new process 
Change version of process 
Starting Point Existing processes Clean slate 
Frequency of One-time or Periodic one-time 
Change continuous change 
Time Required Short Long 
Typical Scope Narrow, within Broad, cross- 
functions functional 
Horizon Past and present Future 
Participation Bottom-up ‘Top-down 
Path to Cultural Cultural, 
Execution structural 
Primary Enabler Statistical control Information 
technology 
Risk Moderate High 


Source: Adapted from Howard Smith and Peter Fingar, Business Process Management: The Third Wave 
(Tampa, FL: Meghan-Kiffer Press, 2003), p. 118. 


FIGURE 2.11 The order management process consists of several business processes and crosses the boundaries of 


traditional business functions. 
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Examples of information 
technologies that support 
reengineering the order 
management processes. 


Reengineering Order Management 


e Customer relationship management systems using corporate intranets and the 


Internet. 


e Supplier-managed invento stems using the Internet and extranets. 
pp g ry Sy g 


e Cross-functional ERP software for integrating manufacturing, distribution, finance, and 
human resource processes. 


© Customer-accessible e-commerce Web sites for order entry, status checking, payment, 
and service. 


e Customer, product, and order status databases accessed via intranets and extranets by 
employees and suppliers. 
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From a business perspective, workflow is a way to make people, information, and com- 
puters work together consistently and efficiently to produce the results the business 
needs. In effect, workflow applies the equivalent of systems analysis to the entire proc- 
ess, not just to the part done on a machine. From a bottom line perspective, adding 
workflow to a process saves money, increases customer satisfaction, gets results quicker, 
and largely eliminates things getting lost in the shuffle. From a manager’s perspective, 
the most important benefits to workflow are saving cost and saving time. 

As an example of a typical workflow, Wilhelm Ederyd, a technical project manager 
at Bonver, a major Scandinavian distributor of home entertainment products, cites 
building support for individuals and businesses ordering broadband services via the 
Internet, postal mail, and e-mail. “This can be a rather complex process, with the 
need for the systems and personnel to interact efficiently in order to make the process 
slim and pleasant to the customer,” Ederyd explains. You can think of workflow as 
systems analysis that mixes humans, machines, documents, and other information. 

In Ederyd’s case, he designed the process for ordering and installing the broad- 
band connection for the customer. Typically that means—given a whole raft of busi- 
ness requirements generated by others—working out how the process would flow 
from the customer's initial contact to the actual installation. 

Ederyd’s example is a classic case: a fairly complex, multistep process where com- 
puters and people have to interact as smoothly and efficiently as possible. It’s also a 
process that is exposed to the customer, and delays or mistakes can damage customer 
relationships. An advantage of a well-designed workflow process is that it can serve 
as a template that can be applied quickly to similar processes. “Once you’re comfort- 
able with workflow in your organization, it will allow you to implement new business 
models much faster than your competitors,” says Ederyd. “The cost and complexity 
of doing so is now manageable.” 

Craig Cameron, a workflow consultant based in Melbourne, cites the example of 
a major Australian bank that wanted to apply workflow to the process used to order 
large amounts of hardware. “They needed to go through all these checks and make 
sure that the right people had signed off on it,” Cameron says. “So we implemented 
a system to do that.” This was fine until the other divisions of the bank found out 
about the new process. “We found out later we’d only created a system for three 
or so of their teams and suddenly another 15 or so teams wanted to be involved,” 
Cameron says. “Instead of having to do a complete restart, we’re extracting what 
we've already done and cutting and pasting it into a new system. Then we hit a button 
to create the end user interface.” 

Workflow isn’t rocket science, but it isn’t magic either. While workflow can make 
major improvements in the way an organization runs, it can only do so if the princi- 
ples are applied correctly. Fundamentally making workflow work for you comes 
down to understanding the processes that make your business work. 


Source: Adapted from Rick Cook, “Making Workflow Work and Flow for You,” CIO Magazine, October 23, 2007. 


We are changing from a competitive environment in which mass-market products and 
services were standardized, long-lived, information-poor, and exchanged in one-time 
transactions, to an environment in which companies compete globally with niche market 
products and services that are individualized, short-lived, information-rich, and ex- 
changed on an ongoing basis with customers. 


Agility in business performance means the ability of a company to prosper in rapidly 
changing, continually fragmenting global markets for high-quality, high-performance, 
customer-configured products and services. An agile company can make a profit in 
markets with broad product ranges and short model lifetimes and can produce orders 
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individually and in arbitrary lot sizes. It supports mass customization by offering indi- 
vidualized products while maintaining high volumes of production. Agile companies 
depend heavily on Internet technologies to integrate and manage their business 
processes while they provide the information-processing power to treat their many 
customers as individuals. 

To be an agile company, a business must use four basic strategies. First, the business 
must ensure that customers perceive the products or services of an agile company as 
solutions to their individual problems. Thus, it can price products on the basis of their 
value as solutions, rather than their cost to produce. Second, an agile company cooper- 
ates with customers, suppliers, other companies, and even with its competitors. This 
cooperation allows a business to bring products to market as rapidly and cost-effectively 
as possible, no matter where resources are located or who owns them. Third, an agile 
company organizes so that it thrives on change and uncertainty. It uses flexible organi- 
zational structures keyed to the requirements of different and constantly changing cus- 
tomer opportunities. Fourth, an agile company leverages the impact of its people and 
the knowledge they possess. By nurturing an entrepreneurial spirit, an agile company 
provides powerful incentives for employee responsibility, adaptability, and innovation. 

Figure 2.13 summarizes another useful way to think about agility in business. 
This framework emphasizes the roles customers, business partners, and information 
technology can play in developing and maintaining the strategic agility of a company. 


FIGURE 2.13 How information technology can help a company be an agile competitor, with the help of 
customers and business partners. 


Type of Agility Description Role of IT Example 
Customer Ability to co-opt custom- Technologies for build- eBay customers are its de 
ers in the exploitation of ing and enhancing facto product develop- 
innovation opportunities virtual customer com- ment team because they 
s munities for product post an average of 
e As sources of innova- design, feedback, and 10,000 messages each 
tion ideas testing week to share tips, point 
eke E A out glitches, and lobby 
A 5 for changes 
innovation 
e As users in testing 
ideas or helping 
other users learn 
about the idea 
Partnering Ability to leverage assets, ‘Technologies facilitating Yahoo! has accomplished 
knowledge, and compe- interfirm collaboration, a significant transforma- 
tencies of suppliers, such as collaborative tion of its service from 
distributors, contract platforms and portals, a search engine into a 
manufacturers, and supply chain systems portal by initiating nu- 
logistics providers in the merous partnerships to 
exploration and exploita- provide content and 
tion of innovation other media-related ser- 
opportunities vices from its Web site 
Operational Ability to accomplish ‘Technologies for modu- Ingram Micro, a global 
speed, accuracy, and cost larization and integra- wholesaler, has deployed 
economy in the exploita- tion of business an integrated trading 
tion of innovation op- processes system allowing its cus- 
portunities tomers and suppliers to 
connect directly to its 
procurement and ERP 
systems 


Source: Adapted from V. Sambamurthy, Anandhi Bhaharadwaj, and Varun Grover, “Shaping Agility Through Digital Options: 
Reconceptualizing the Role of Information Technology in Contemporary Firms,” MIS Quarterly, June 2003, p. 246. 
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FIGURE 2.14 A virtual company uses the Internet, intranets, and extranets to form virtual 
workgroups and support alliances with business partners. 
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Notice how information technology can enable a company to develop relationships 
with its customers in virtual communities that help it be an agile innovator. As we will 
see repeatedly throughout this textbook, information technologies enable a company 
to partner with its suppliers, distributors, contract manufacturers, and others via collabo- 
rative portals and other Web-based supply chain systems that significantly improve its 
agility in exploiting innovative business opportunities. 


In today’s dynamic global business environment, forming a virtual company can be 
one of the most important strategic uses of information technology. A virtual company 
(also called a virtual corporation or virtual organization) is an organization that uses in- 
formation technology to link people, organizations, assets, and ideas. 

Figure 2.14 illustrates that virtual companies typically form virtual workgroups and 
alliances with business partners that are interlinked by the Internet, intranets, and ex- 
tranets. Notice that this company has organized internally into clusters of process and 
cross-functional teams linked by intranets. It has also developed alliances and extranet 
links that form interenterprise information systems with suppliers, customers, subcon- 
tractors, and competitors. Thus, virtual companies create flexible and adaptable virtual 
workgroups and alliances keyed to exploit fast-changing business opportunities. 


Why do people form virtual companies? It is the best way to implement key business 
strategies and alliances that promise to ensure success in today’s turbulent business 
climate. Several major reasons for virtual companies stand out and are summarized in 
Figure 2.15. 

For example, a business may not have the time or resources to develop the neces- 
sary manufacturing and distribution infrastructure, personnel competencies, and in- 
formation technologies to take full advantage of a new market opportunity in a timely 
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FIGURE 2.15 Strategies of Virtual Companies 


The basic business : 7 3 A 
strategies of virtual e Share infrastructure and risk with alliance partners. 


companies. e Link complementary core competencies. 


© Reduce concept-to-cash time through sharing. 


e Increase facilities and market coverage. 


@ Gain access to new markets and share market or customer loyalty. 


e Migrate from selling products to selling solutions. 


manner. It can assemble the components it needs to provide a world-class solution for 
customers and capture the market opportunity only by quickly forming a virtual com- 
pany through a strategic alliance of all-star partners. Today, of course, the Internet, 
intranets, extranets, and a variety of other Internet technologies are vital components 
in creating such successful solutions. 


United Kingdom’s In-house technology is no longer an operational prerequisite, thanks to outsourcing. 
National Rail Software, servers, Internet connectivity, and even whole operations like payroll and 

B HR can be sourced from third parties and branded, so neither the customers nor 
Enquiries: employees of the business need ever know these mechanisms reside outside the com- 


Everything They pany headquarters. 

Do Is Outsourced That being said, the fact that the United Kingdom’s rail information service, 
National Rail Enquiries (NRE), served 55 million customers online last year alone 
and relies on extensive self-service and contact center service channels but has a core 
staff of only 21 people—which is no small achievement. “NRE has about 22 suppli- 
ers of various services. Everything we do is outsourced. We have 1,500 people in call 

D centers alone, who all work for NRE,” says Chris Scoggins, NRE’s CEO. The NRE’s 
telephone information service was born of the creation of the organization in 1996 
with the privatization of British Rail. Since then, it has expanded to include auto- 
mated telephone services and a very successful real-time online train time and jour- 
ney planning service. 

Scoggins says NRE has a strategy of maintaining a number of suppliers to effec- 
tively play them off against each other and raise the stakes in terms of demonstrating 
service excellence. “We have the maximum number of suppliers we can manage 
effectively. But also, and perhaps more importantly, we need the right number of 
suppliers to maintain a competitive market for the services they run. In some areas, 
we have a strategy to build up a number of niche players in the market, otherwise we 
are relying on one supplier.” 

“What we’re trying to do is move toward a number of long-term relationships 
with partners we trust and give more work to them,” Scoggins says. “Contracts are 
aligned to incentives related to achieving our business objectives and it’s up to the 
supplier to outperform the minimum standard. If they demonstrate they can de- 
liver over and above that then they get more work.” Despite heading up a vast, 
virtual company, Scoggins says there is still pressure to drive business improve- 
ment and success. “When I joined there was no real self-service provision for the 
customer. NRE was a very big, outsourced call center with virtually no other pro- 
vision for finding information. I saw this as a huge opportunity driven by two 
things. The first was that customer needs should be met by whichever channel is 
most convenient for them; the second was our call centers, which have the most 
volatile volumes in Europe.” 
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Building a 
Knowledge- 
Creating 
Company 


FIGURE 2.16 


Knowledge management 
can be viewed as three levels 
of techniques, technologies, 
and systems that promote 
the collection, organization, 
access, sharing, and use of 
workplace and enterprise 
knowledge. 


NRE is always seeking to be proactive and do new things, like the speech recog- 
nition technology they use with their telephone ‘Train Tracker service. “It is the most 
sophisticated mass-market speech recognition service in the world,” notes Scoggins. 
And adds: “I regard our outsourcing suppliers as part of our team, and my job is get- 
ting my team excited and encouraged to do the job in hand.” 


Source: Adapted from Miya Knights, “Everything We Do Is Outsourced,” CIO Magazine, June 13, 2007. 


In an economy where the only certainty is uncertainty, the one sure source of lasting com- 
petitive advantage is knowledge. When markets shift, technologies proliferate, competitors 
multiply, and products become obsolete almost overnight, successful companies are those 
that consistently create new knowledge, disseminate it widely throughout the organiza- 
tion, and quickly embody it in new technologies and products. These activities define the 
“knowledge-creating” company, whose sole business is continuous innovation. 


Many companies today can only realize lasting competitive advantage if they become 
knowledge-creating companies or learning organizations. That means consistently 
creating new business knowledge, disseminating it widely throughout the company, 
and quickly building the new knowledge into their products and services. 

Knowledge-creating companies exploit two kinds of knowledge. One is explicit 
knowledge, which is the data, documents, and things written down or stored on com- 
puters. The other kind is tacit knowledge, or the “how-tos” of knowledge, which resides 
in workers. Tacit knowledge can often represent some of the most important informa- 
tion within an organization. Long-time employees of a company often “know” many 
things about how to manufacture a product, deliver the service, deal with a particular 
vendor, or operate an essential piece of equipment. This tacit knowledge is not re- 
corded or codified anywhere because it has evolved in the employee’s mind through 
years of experience. Furthermore, much of this tacit knowledge is never shared with 
anyone who might be in a position to record it in a more formal way because there is 
often little incentive to do so or simply, “Nobody ever asked.” 

As illustrated in Figure 2.16, successful knowledge management creates tech- 
niques, technologies, systems, and rewards for getting employees to share what they 
know and make better use of accumulated workplace and enterprise knowledge. In 
that way, employees of a company are leveraging knowledge as they do their jobs. 


Leveraging organizational “know-how” 
Performance support 

Interacting with operational databases 
Building expert networks 


Capturing & distributing expert stories 
Real-time information management 
Communication and collaboration 
New content creation 


Accessing and retrieving 
documents stored online 


Source: Adapted from Marc Rosenberg, e-Learning: Strategies for Delivering Knowledge in the Digital 
Age (New York: McGraw-Hill, 2001), p. 70. 
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Management 
Systems 


Intec Engineering: 
Smarter by 
the Hour 
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Making personal knowledge available to others is the central activity of the knowledge- 
creating company. It takes place continuously and at all levels of the organization. 


Knowledge management has thus become one of the major strategic uses of infor- 
mation technology. Many companies are building knowledge management systems 
(KMS) to manage organizational learning and business know-how. The goal of such 
systems is to help knowledge workers create, organize, and make available important 
business knowledge, wherever and whenever it’s needed in an organization. This in- 
formation includes processes, procedures, patents, reference works, formulas, “best 
practices,” forecasts, and fixes. As you will see in Chapter 10, Internet and intranet 
Web sites, groupware, data mining, knowledge bases, and online discussion groups are 
some of the key technologies that may be used by a KMS. 

Knowledge management systems also facilitate organizational learning and knowl- 
edge creation. They are designed to provide rapid feedback to knowledge workers, 
encourage behavior changes by employees, and significantly improve business per- 
formance. As the organizational learning process continues and its knowledge base 
expands, the knowledge-creating company works to integrate its knowledge into its 
business processes, products, and services. This integration helps the company be- 
come a more innovative and agile provider of high-quality products and customer 
services, as well as a formidable competitor in the marketplace. Now let’s close this 
chapter with an example of knowledge management strategies from the real world. 


It’s hard to place a value on knowledge management systems. ‘Their ability to gener- 
ate income is often measured indirectly; their links to cost savings frequently seem 
tenuous. The return on investment is hard to quantify. Too often, the case for imple- 
menting a system to leverage intellectual capital and expertise rests mainly on intui- 
tion: It seems like a good idea. But intuition wasn’t nearly enough to sell executives 
at Intec Engineering Partnership Ltd., a company whose dedication to thrift is ex- 
ceeded only by its passion for sharing knowledge. 

An engineering firm serving the oil and gas industry, Intec is headquartered in 
Houston with offices throughout the world. As Intec grew through expansion and inter- 
national acquisitions, it became more difficult to keep track of and access information. In 
fact, according to KPMG International, 6 out of 10 employees say difficulty in accessing 
undocumented knowledge is a major problem. A group of Intec engineers volunteered to 
work on the problem of how to better capture lessons learned and share knowledge 
among them. They diagrammed how they solved engineering problems and envisioned an 
ideal process: An engineer with a question would go to a knowledge database that would 
either provide an answer or refer him to an expert. All new knowledge would be auto- 
matically captured and stored in the database. Intec shopped around and selected software 
from AskMe Corp. as the product most likely to facilitate Intec’s problem-solving model. 

The pilot, called AskIntec, began in May 2002. Three months later, it had exceeded 
all of the performance and user metrics, and ROI calculations projected an annual re- 
turn of 133 percent. After nearly a year, the system is paying off almost exactly as pro- 
jected. “Our numbers were pretty spot-on, but they’re going up,” says CIO Fran Steele, 
noting that the company estimates payback of 50 percent more next year as nonengi- 
neering employees are added and the system becomes embedded in the culture. 

“Some of the return on information is not quantified just by how quickly you can 
do something, but by the fact that you can do it at all,” says Steele. In the end, custom- 
ers profit from Intec’s knowledge management investment. “If we can cut weeks off a 
project and help them get their facility ready earlier, they can get to market sooner 
and get that revenue earlier,” she says. That’s the ultimate value. 


Source: Adapted from Kathleen Melymuka, “Knowledge Management Helps Intec Get Smarter by the Hour,” 
Computerworld, June 23, 2003. 
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Strategic Uses of Information Technology. Informa- 
tion technologies can support many competitive strate- 
gies. They can help a business cut costs, differentiate and 
innovate in its products and services, promote growth, 
develop alliances, lock in customers and suppliers, create 
switching costs, raise barriers to entry, and leverage its 
investment in IT resources. Thus, information technol- 
ogy can help a business gain a competitive advantage in 
its relationships with customers, suppliers, competitors, 
new entrants, and producers of substitute products. Refer 
to Figures 2.3 and 2.5 for summaries of the uses of infor- 
mation technology for strategic advantage. 


Building a Customer-Focused Business. A key stra- 
tegic use of Internet technologies is to build a company 
that develops its business value by making customer 
value its strategic focus. Customer-focused companies 
use Internet, intranet, and extranet e-commerce Web 
sites and services to keep track of their customers’ pref- 
erences; to supply products, services, and information 
anytime, anywhere; and to provide services tailored to 
the individual needs of the customers. 


Reengineering Business Processes. Information 
technology is a key ingredient in reengineering business 
operations because it enables radical changes to busi- 
ness processes that dramatically improve their efficiency 
and effectiveness. Internet technologies can play a ma- 
jor role in supporting innovative changes in the design 
of workflows, job requirements, and organizational 
structures in a company. 


Becoming an Agile Company. A business can use 
information technology to help it become an agile 


company. Then it can prosper in rapidly changing 
markets with broad product ranges and short model 
lifetimes in which it must process orders in arbitrary lot 
sizes; it can also offer its customers customized products 
while it maintains high volumes of production. An agile 
company depends heavily on Internet technologies to 
help it respond to its customers with customized solu- 
tions, and to cooperate with its customers, suppliers, 
and other businesses to bring products to market as 
rapidly and cost-effectively as possible. 


Creating a Virtual Company. Forming virtual compa- 
nies has become an important competitive strategy in 
today’s dynamic global markets. Internet and other 
information technologies play a key role in providing 
computing and telecommunications resources to 
support the communications, coordination, and infor- 
mation flows needed. Managers of a virtual company 
depend on IT to help them manage a network of 
people, knowledge, financial, and physical resources 
provided by many business partners to take advantage 
of rapidly changing market opportunities. 


Building a Knowledge-Creating Company. Lasting 
competitive advantage today can only come from the 
innovative use and management of organizational 
knowledge by knowledge-creating companies and 
learning organizations. Internet technologies are 
widely used in knowledge management systems to 
support the creation and dissemination of business 
knowledge and its integration into new products, 
services, and business processes. 


Key Terms and Concepts l 


These are the key terms and concepts of this chapter. The page number of their first explanation is in parentheses. 


1 
2 
3 
4 
5 
6 


. Agile company (60) 7. Interenterprise information 


. Business process reengineering (56) systems (62) 


. Competitive forces (44) 
. Competitive strategies (47) 


: system (65) 
. Create switching costs (50) 


8. Knowledge-creating company (64) 


9. Knowledge management 


11. Lock in customers and suppliers (50) 
12. Raise barriers to entry (50) 

13. Strategic information systems (44) 
14. Value chain (54) 

15. Virtual company (62) 


10. Leverage investment in IT (50) 


. Customer value (52) 


Review Quiz 


Match one of the key terms and concepts listed previously with one of the brief examples or definitions that follow. Try to find 
the best fit for answers that seem to fit more than one term or concept. Defend your choices. 


—— 1. A business must deal with customers, suppliers, 


competitors, new entrants, and substitutes. 


—— 2. Cost leadership, differentiation of products, and 


new product innovation are examples. 


—— 3. Using investments in technology to keep firms out 


of an industry. 


—— 4. Making it unattractive for a firm’s customers or 


suppliers to switch to its competitors. 


5. Strategies designed to increase the time, money, 
and effort needed for customers or suppliers to 
change to a firm’s competitors. 


6. Information systems that reengineer business 
processes or promote business innovation are 
examples. 


7. This strategic focus recognizes that quality, rather 
than price, has become the primary determinant in 
customers choosing a product or service. 


8. Highlights how strategic information systems can 
be applied to a firm’s business processes and sup- 
port activities for competitive advantage. 


—— 9. A business finding strategic uses for the computing 


and telecommunications capabilities it has 
developed to run its operations. 
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—— 10. Information technology helping a business make 


radical improvements in business processes. 


—— 11. A business can prosper in rapidly changing mar- 


kets while offering its customers individualized 
solutions to their needs. 


__— 12. A network of business partners formed to take ad- 


vantage of rapidly changing market opportunities. 


__— 13. Learning organizations that focus on creating, 


disseminating, and managing business knowledge. 


—— 14. Information systems that manage the creation and 


dissemination of organizational knowledge. 


— 15. Using the Internet and extranets to link a compa- 


ny’s information systems to those of its customers 
and suppliers. 


Discussion Questions 


. Suppose you are a manager being asked to develop com- 
puter-based applications to gain a competitive advantage 
in an important market for your company. What reser- 
vations might you have about doing so? Why? 


. How could a business use information technology to in- 
crease switching costs and lock in its customers and sup- 
pliers? Use business examples to support your answers. 


. How could a business leverage its investment in infor- 
mation technology to build strategic IT capabilities that 
serve as a barrier to new entrants into its markets? 


. Refer to the Real World Case on IT leaders and rein- 
venting IT in the chapter. How would these ideas about 
the strategic positioning of IT apply to a small company? 
Do you think a small business would have a harder or 
an easier time aligning its business and IT organizations? 
Use an example to illustrate your answer. 


. What strategic role can information play in business 
process reengineering? 


. How can Internet technologies help a business form stra- 
tegic alliances with its customers, suppliers, and others? 


10. 


. How could a business use Internet technologies to form 


a virtual company or become an agile competitor? 


. Refer to the Real World Case on companies using smart- 


phones in the chapter. Do you think smaller companies 
like Lloyds Construction are ready for large-scale im- 
plementations of technology in their business? What 
could they do to prepare for those implementations? 
Use examples to illustrate your answer. 


. Information technology can’t really give a company a 


strategic advantage because most competitive advan- 
tages don’t last more than a few years and soon become 
strategic necessities that just raise the stakes of the 
game. Discuss. 


MIS author and consultant Peter Keen says: “We have 
learned that it is not technology that creates a competi- 
tive edge, but the management process that exploits 
technology.” What does he mean? Do you agree or 
disagree? Why? 


Analysis Exercises 


1. End-User Computing 


Skill Assessment 

Not all programs are written by dedicated program- 
mers. Many knowledge workers write their own soft- 
ware using familiar word processing, spreadsheet, 
presentation, and database tools. This textbook contains 
end-user computing exercises representing a real-world 
programming challenge. This first exercise will allow 
your course instructor to assess the class. Assess your 
skills in each of the following areas: 


a. Word processing: Approximately how many 
words per minute can you type? Do you use styles 


to manage document formatting? Have you 
ever set up your own mail merge template and 
data source? Have you created your own macros 
to handle repetitive tasks? Have you ever added 
branching or looping logic in your macro 
programs? 

b. Spreadsheets: Do you know the order of operations 
your spreadsheet program uses (what does “=5*242- 
10” equal)? Do you know how to automatically sort 
data in a spreadsheet? Do you know how to create 
graphs and charts from spreadsheet data? Can you 
build pivot tables from spreadsheet data? Do you 
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know the difference between a relative and a fixed 
cell reference? Do you know how to use functions in 
your spreadsheet equations? Do you know how to 
use the IF function? Have you created your own 
macros to handle repetitive tasks? Have you ever 
added branching or looping logic in your macro 
programs? 

c. Presentations: Have you ever used presentation 
software to create presentation outlines? Have you 
added your own multimedia content to a presenta- 
tion? Do you know how to add charts and graphs 
from spreadsheet software into your presentations so 
that they automatically update when the spreadsheet 
data change? 

d. Database: Have you ever imported data into a data- 
base from a text file? Have you ever written queries 
to sort or filter data stored in a database table? Have 
you built reports to format your data for output? 
Have you built forms to aid in manual data entry? 
Have you built functions or programs to manipulate 
data stored in database tables? 


2. Marketing: Competitive Intelligence 


Strategic Marketing 
Marketing professionals use information systems to 
gather and analyze information about their competi- 
tors. They use this information to assess their product’s 
position relative to the competition and make strategic 
marketing decisions about their product, its price, its 
distribution (place), and how to best manage its pro- 
motion. Michael Bloomberg, founder of Bloomberg 
(www.bloomberg.com), and others have made their 
fortunes gathering and selling data about businesses. 
Marketing professionals find information about a busi- 
ness’s industry, location, employees, products, technol- 
ogies, revenues, and market share useful when planning 
marketing initiatives. 

During your senior year, you will find yourself 
in close competition for jobs. You can take the same 
intelligence-gathering approach used by professional 
marketers when planning how to sell your own skills. 
Use the following questions to help you prepare for 
your job search: 


a. Product: Which business majors are presently in 
greatest demand by employers? Use entry-level 
salaries as the primary indicator for demand. 

b. Product: Which colleges or universities in your re- 
gion pose the greatest competitive threat to students 
with your major? 

c. Price: What is the average salary for entry-level 
employees in your major and geographic region? Is 
salary your top concern? Why or why not? 

d. Place: What areas of the country are currently 
experiencing the greatest employment growth? 

e. Promotion: What is your marketing plan? Describe 
how you plan to get your name and qualifications in 
front of prospective employers. How can the Inter- 
net help you get noticed? 


3. Competing against Free 
Wikipedia Faces Down Encyclopedia Britannica 
The record and movie industries are not the only in- 
dustries to find themselves affected by free access to 
their products. Encyclopedia Britannica faces chal- 
lenges by a nonprofit competitor that provides its ser- 
vices without charge or advertising, Wikipedia.org. 
Wikipedia depends on volunteers to create and edit 
original content under the condition that contributors 
provide their work without copyright. 

Who would work for free? During the creation of 
the Oxford English Dictionary in the 19th century, the 
editors solicited word articles and references from the 
general public. In the 20th century, AOL.com found 
thousands of volunteers to monitor its chat rooms. 
Amazon.com coaxed more than 100,000 readers to 
post book reviews on its retail Web site. Outdoing them 
all in the 21st century, Wikipedia published its one- 
millionth English language article in March 2006. 
Wikipedia includes more than two million articles in 
more than 200 languages, all created and edited by 
more than one million users. 

Can Wikipedia compete on quality? Wikipedia 
provides its users both editing and monitoring tools, 
which allows users to self-police. Wikipedia also uses 
voluntary administrators who block vandals, temporar- 
ily protect articles, and manage arbitration processes 
when disputes arise. A paper published by Nature in 
December 2005 evaluated 50 Wikipedia articles and 
found an average of four factual errors per Wikipedia 
article compared with an average of three errors per 
article in the Encyclopedia Britannica. More signifi- 
cantly, Wikipedians (as the volunteers call themselves) 
corrected each error by January 2006. Alexa.com rated 
Wikipedia.org as the 17th most visited Web site on the 
Internet, while Britannica.com came in 2,858th place 
(Yahoo and Google ranked in the Ist and 2nd places). 

Wikipedia has already built on its success. In addi- 
tion to offering foreign language encyclopedias, it also 
provides a common media archive (commons. wikimedia. 
org), a multilingual dictionary (www.wiktionary.org), 
and a news service (www.wikinews.org). 


a. How does the Wikimedia Foundation meet the 
criteria for an “agile” company? 

b. How does the Wikimedia Foundation meet the 
criteria for a “virtual” company? 

c. How does the Wikimedia Foundation meet the 
criteria for a “knowledge-creating” organization? 

d. How would you recommend that Encyclopedia 
Britannica adapt to this new threat? 


4. Knowledge Management 
Knowing What You Know 
Employees often receive a great deal of unstructured 
information in the form of e-mails. For example, em- 
ployees may receive policies, announcements, and daily 
operational information via e-mail. However, e-mail 
systems typically make poor enterprisewide knowledge 


management systems. New employees don’t have access 
to e-mails predating their start date. Employees typically 
aren’t permitted to search others’ e-mail files for 
needed information. Organizations lose productivity 
when each employee spends time reviewing and orga- 
nizing his or her e-mail files. Lastly, the same informa- 
tion may find itself saved across thousands of different 
e-mail files, thereby ballooning e-mail file storage space 
requirements. 

Microsoft’s Exchange server, IBM’s Domino server, 
and Interwoven’s WorkSite, along with a wide variety 
of open-standard Web-based products, aim to address 
an organization’s need to share unstructured informa- 
tion. These products provide common repositories 
for various categories of information. For example, 
management may use a “Policy” folder in Microsoft 
Exchange to store all their policy decisions. Likewise, 
sales representatives may use a “Competitive Intelli- 
gence” database in IBM’s Domino server to store infor- 
mation obtained during the sales process about 
competing products, prices, or marketplace rumors. 
WorkSite users categorize and store all their electronic 
documents in a large, searchable, secured common re- 
pository. Organizations using these systems can secure 
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them, manage them, and make them available to the 
appropriate personnel. Managers can also appoint a few 
specific employees requiring little technical experience 
to manage the content. 

However, these systems cannot benefit an organiza- 
tion if its employees fail to contribute their knowledge, 
if they fail to use the system to retrieve information, or 
if the system simply isn’t available where and when 
needed. To help managers better understand how 
employees use these systems, knowledge management 
systems include usage statistics such as date/time, user 
name, reads, writes, and even specific document access 
information. 

Research each of the products mentioned above and 
answer the following questions: 


a. What steps might a manager take to encourage 
his or her employees to use their organization’s 
knowledge management system? 

b. Should managers set minimum quotas for system 
usage for each employee? Why or why not? 

c. Aside from setting employee usage quotas, how 
might an organization benefit from knowledge 
management system usage statistics? 
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REAL WORLD 


Wachovia and Others: Trading 
Securities at the Speed of Light 


ecurities trading is one of the few business activities 

where a one-second processing delay can cost a com- 

pany big bucks. Wachovia Corporate and Investment 
Bank is addressing the growing competitive push toward in- 
stantaneous trading with a comprehensive systems overhaul. 
In a project that has cost more than $10 million so far, Wa- 
chovia is tearing down its systems silos and replacing them 
with an infrastructure that stretches seamlessly across the 
firm’s many investment products and business functions. 

“Competitive advantage comes from your math, your 
workflow and your processes through your systems. Straight- 
through processing is the utopian challenge for Wall Street 
firms,” says Tony Bishop, senior vice president and head of 
architecture and engineering. The first step in the project, 
according to Bishop, was to prepare a matrix that cross- 
referenced every major function (such as research, risk man- 
agement, selling, trading, clearing, settlement, payment, and 
reporting) to each major product (debt and equity products, 
asset-backed finance, derivatives, and so on). The project 
team then had to take a hard look at the existing systems in 
each cell. “We looked at the current systems and said, 
‘Where can we build standardized frameworks, components 
and services that would allow us to, instead of building it 
four different times in silos, build it once and extend it into 
one common sales platform, one common trading platform 
and so on?” 

The resulting Service Oriented Enterprise Platform is 
connected to a 10,000-processor grid using GridServer and 
FabricServer from DataSynapse Inc. 

In its data centers, Wachovia brought in Verari Systems 
Inc.’s BladeRacks with quad-core Intel processors. Bishop 
says he’s creating a “data center in a box” because Verari also 
makes storage blades that can be tightly coupled with 
processing blades in the same rack. The processing load at 
the bank involves a great deal of reading and writing to tem- 
porary files, and the intimate linkage of computing and stor- 
age nodes makes that extremely efficient. 

“We now do pricing in milliseconds, not seconds, for ei- 
ther revenue protection or revenue gain,” says Bishop. The 
advanced infrastructure has tripled processing capacity at 
one-third the cost, for a ninefold financial return, Bishop 
adds. Report generation that used to take 16 hours is now 
done in 15 minutes. “This is where IT becomes the enabler 
to new business capabilities,” he says. 

Executing complex strategies based on arcane mathe- 
matical formulas, algorithmic trading systems generate 
thousands of buy and sell orders every second, many of 
which are canceled and overridden by subsequent orders, 
sometimes only a few seconds apart. The goal of these com- 
puter traders is to profit from minute, fleeting price anoma- 
lies and to mask their intentions via “time slicing,” or carving 
huge orders into smaller batches so as not to move the mar- 
ket. A one-millisecond advantage in trading applications can 


be worth $100 million a year to a major brokerage firm, by 
one estimate. 

The fastest systems, running from traders’ desks to 
exchange data centers, can execute transactions in a few 
milliseconds—so fast, in fact, that the physical distance be- 
tween two computers processing a transaction can slow down 
how fast it happens. This problem is called data latency— 
delays measured in split seconds. To overcome it, many 
high-frequency algorithmic traders are moving their sys- 
tems as close to the Wall Street exchanges as possible. 

Wall Street’s quest for speed is not only putting floor 
traders out of work but also opening up space for new alter- 
native exchanges and e-communications networks that com- 
pete with the established stock markets. E-trading has reduced 
overall volatility in the equities markets, because volatility 
is a product of herd buying or selling, and e-trading— 
responding instantaneously to tiny price fluctuations— 
tends to smooth out such mass behavior. It has also 
provided established exchanges with new revenue oppor- 
tunities, such as co-location services for companies that 
wish to place their servers in direct physical proximity to 
the exchanges’ systems. E-trading has also created oppor- 
tunities for a new class of vendors—execution services 
firms and systems integrators promising the fastest possi- 
ble transaction times. 

At its most abstract level, the data-latency race repre- 
sents the spear point of the global movement to eradicate 
barriers—geographic, technical, psychological—to fair and 
transparent markets. “Any fair market is going to select the 
best price from the buyer or seller who gets their [sic] order in 
there first,” says Alistair Brown, founder of Lime Brokerage, 
one of the new-school broker-dealers, which uses custom- 
ized Linux servers to trade some 200 million shares a day. 
“At that point, speed definitely becomes an issue. If everyone 
has access to the same information, when the market moves, 
you want to be first. The people who are too slow are going 
to get left behind.” 


Value in Milliseconds 


On the New Jersey side of the Lincoln Tunnel, in an anony- 
mous three-story building, is one of the financial world’s 
most important data centers. Pushing the doorbell at the un- 
marked main entrance won’t get you inside. It’s merely a fa- 
cade; the real entrance is harder to find. 

The servers for five electronic exchanges are located in 
this data center, along with computers belonging to dozens 
of trading firms. Run by hosting company Savvis, the 
Weehawken facility is home to some of the most advanced 
trading technology anywhere. Much of Savvis’s growth can 
be traced to the spread of what’s known as direct market 
access. In the past, traders used consolidated feeds, which 
are market data updates such as those provided by Reuters 


and Thomson. Distributing those feeds, however, could 
take up to 500 milliseconds, far too long for today’s auto- 
mated trading. 

“Now you’re seeing a lot of the market data providers 
and vendors who have direct exchange-feed connectivity,” 
says Varghese Thomas, Savvis’s vice president of financial 
markets. Savvis provides connectivity from the exchange 
directly to the client without having to go through a con- 
solidated system. The exchanges themselves are also profit- 
ing from the demand for server space in physical proximity 
to the markets. Even on the fastest networks, it takes 7 milli- 
seconds for data to travel between the New York markets 
and Chicago-based servers and 35 milliseconds between the 
West and East coasts. 

Many broker-dealers and execution-services firms are 
paying premiums to place their servers inside the data 
centers of the National Association of Securities Dealers 
(NASDAQ) and the New York Stock Exchange (NYSE). 

About 100 firms now co-locate their servers with 
NASDAQ’, says Brian Hyndman, NASDAQ’s senior vice 
president of transaction services, at a going rate of about 
$3,500 per rack per month. NASDAQ has seen 25 percent 
annual increases in co-location in the last two years. 

Physical co-location eliminates the unavoidable time 
lags inherent in even the fastest wide-area networks. Servers 
in shared data centers typically are connected via Gigabit 
Ethernet, with the ultra-highspeed switching fabric called 
InfiniBand increasingly used for the same purpose, says 
Yaron Haviv, CTO at Voltaire, a supplier of systems that 
can achieve latencies of less than a microsecond, or one- 
millionth of a second. Later this year, NASDAQ will shut 
down its data center in Trumbull, Connecticut, and move all 
operations to one opened last year in New Jersey, with a 
backup in the mid-Atlantic region, Hyndman says. (Trading 
firms and exchanges are reluctant to disclose the exact loca- 
tions of their data centers.) 


CASE STUDY QUESTIONS 


1. What competitive advantages can the companies de- 
scribed in the case derive from the use of faster technol- 
ogy and co-location of servers with the exchanges? 
Which would you say are sustainable, and which ones 
temporary or easily imitable? Justify your answer. 


m 


Tony Bishop of Wachovia stated that “Competitive ad- 
vantage comes from your math, your workflow and 
your processes through your systems.” Referring to 
what you have learned in this chapter, develop opposing 
viewpoints as to the role of IT, if any, in the develop- 
ment of competitive advantage. Use examples from the 
case to support your positions. 


3. What companies in industries other than securities 
trading could benefit from technologies that focus on 
reducing transaction processing times? Provide several 
examples. 
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The NYSE will begin to reduce its 10 data centers to 
2 in the next couple of years, says CTO Steve Rubinow. 
Co-location, Rubinow says, not only guarantees fast trans- 
actions, but also predictable ones. “If you’ve got some 
trades going through at 10 milliseconds and some at 1 milli- 
second, that’s a problem” he says. “Our customers don’t 
like variance.” 

One of the biggest co-location customers is Credit 
Suisse, which handles about 10 percent of all U.S. equity 
trades daily and which helped pioneer black-box trading 
systems with exotic algorithms that go by monikers like 
Sniper, Guerrilla, and Inline. Credit Suisse maintains Sun 
and Egenera blade servers, some running Linux and some 
Windows, in all the major U.S. markets, says Guy Cirillo, 
manager of global sales channels for Credit Suisse’s Ad- 
vanced Execution Services (AES) unit, which serves major 
hedge funds and other buy-side clients. 

The AES trading engine in Credit Suisse’s Manhattan 
headquarters is replicated in London, Hong Kong, and 
Tokyo. 

Guaranteed transaction times for AES clients—from 
the time the order is received on the Credit Suisse system 
until it gets an acknowledgment from the exchange, e- 
communications network or “crossing network”—has 
dropped from 15 milliseconds to 8 in the last year, Cirillo 
says. Total execution time also includes any delays within 
the exchange or “liquidity point” itself, a latency variable 
over which Credit Suisse has no control. 

“That response time is something the ECNs [electronic 
communications networks] and the exchanges compete on as 
well,” Cirillo says. “Their latency, their turnaround time, 
and their infrastructure are all part of the electronic game.” 


Source: Adapted from Gary Anthes, “Split Second Securities Trading at 
Wachovia,” Computerworld, May 21, 2007; and Richard Martin, “Wall 
Street’s Quest to Process Data at the Speed of Light,” Information Week, 
April 21, 2007. 


REAL WORLD ACTIVITIES 


1. Most of the discussion in the case was done from the 
perspective of the trading firms and the value that these 
technologies add to them and their customer. However, 
the case also mentions actions taken by stock exchanges 
to improve their transaction processing and turn these 
needs into a revenue-generating asset. Research what re- 
cent technologies have been implemented by major stock 
exchanges such as NYSE and NASDAQ and prepare a 
report detailing what benefits have occurred as a result. 


2. The technologies described in the case represent an ex- 
ample of how different barriers to the flow of goods and 
information are being overcome by the use of IT. Break 
into small groups and select an industry other than the 
one described in the case and brainstorm what barriers 
to commerce you see there and how IT may help to do 
away with them. 
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hat challenges do information system technologies pose for business 

professionals? What basic knowledge should you possess about 

information technology? The four chapters of this module give 
you an overview of the hardware, software, and data resource management and 
telecommunications network technologies used in information systems and 
their implications for business managers and professionals. 


Chapter 3: Computer Hardware reviews history, trends, and developments in 
microcomputer, midrange, and mainframe computer systems; basic computer 
system concepts; and the major types of technologies used in peripheral devices 
for computer input, output, and storage. 


Chapter 4: Computer Software reviews the basic features and trends in the 
major types of application software and system software used to support enter- 
prise and end-user computing. 


Chapter 5: Data Resource Management emphasizes management of the data 
resources of computer-using organizations. This chapter reviews key database 
management concepts and applications in business information systems. 


Chapter 6: Telecommunications and Networks presents an overview of the 
Internet and other telecommunication networks, business applications, and 
trends and reviews technical telecommunications alternatives. 


COMPUTER HARDWARE 


Section I 

Computer Systems: End User and Enterprise 
Computing 

Introduction 

A Brief History of Computer Hardware 


Real World Case: IBM, Wachovia, and PayPal: 
Grid Computing Makes It Easier and Cheaper 


‘Types of Computer Systems 

Microcomputer Systems 

Midrange Systems 

Mainframe Computer Systems 

Technical Note: The Computer System Concept 
Moore’s Law: Where Do We Go from Here? 
Section II 

Computer Peripherals: Input, Output, and 
Storage Technologies 

Peripherals 

Input Technologies 


Real World Case: Apple, Microsoft, IBM, and Others: 


The Touch Screen Comes of Age 
Output Technologies 

Storage Trade-Offs 
Semiconductor Memory 
Magnetic Disks 

Magnetic Tape 

Optical Disks 

Radio Frequency Identification 
Predictions for the Future 


Real World Case: Kimberly-Clark and Daisy Brands: 
Secrets to RFID Success 


Business 
Applications 


. Understand the history and evolution of computer 


hardware. 


. Identify the major types and uses of microcom- 


puter, midrange, and mainframe computer systems. 


. Outline the major technologies and uses of com- 


puter peripherals for input, output, and storage. 


. Identify and give examples of the components and 


functions of a computer system. 


. Identify the computer systems and peripherals 


you would acquire or recommend for a business 
of your choice, and explain the reasons for your 
selections. 
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SECTION I 


Introduction 


A Brief History 
of Computer 
Hardware 


Computer Systems: End User 
and Enterprise Computing 


All computers are systems of input, processing, output, storage, and control compo- 
nents. In this section, we discuss the history, trends, applications, and some basic con- 
cepts of the many types of computer systems in use today. In Section II, we will cover 
the changing technologies for input, output, and storage that are provided by the pe- 
ripheral devices that are part of modern computer systems. 

Read the Real World Case regarding the business benefits and challenges of grid 
computing systems. We can learn a lot about how different organizations use large- 
scale applications of grid computing from this case. See Figure 3.1. 


‘Today we are witnessing rapid technological changes on a broad scale. However, 
many centuries elapsed before technology was sufficiently advanced to develop 
computers. Without computers, many technological achievements of the past 
would not have been possible. To fully appreciate their contribution, however, we 
must understand their history and evolution. Whereas a thorough discussion 
of computing history is beyond the scope of this text, a brief consideration of the 
development of the computer is possible. Let’s look quickly into the development 
of computers. 

At the dawn of the human concept of numbers, humans used their fingers and toes 
to perform basic mathematical activities. Then our ancestors realized that by using 
some objects to represent digits, they could perform computations beyond the limited 
scope of their own fingers and toes. Can’t you just see in your mind a cave full of cave- 
men performing some group accounting function using their fingers, toes, sticks, and 
rocks? It creates a comical, yet accurate picture to be sure. 

Shells, chicken bones, or any number of objects could have been used, but the fact 
that the word calculate is derived from calculus, the Latin word for “small stone,” sug- 
gests that pebbles or beads were arranged to form the familiar abacus, arguably the 
first human-made computing device. By manipulating the beads, it was possible with 
some skill and practice to make rapid calculations. 

Blaise Pascal, a French mathematician, invented what is believed to be the first 
mechanical adding machine in 1642. The machine partially adopted the principles of 
the abacus but did away with the use of the hand to move the beads or counters. In- 
stead, Pascal used wheels to move counters. The principle of Pascal’s machine is still 
being used today, such as in the counters of tape recorders and odometers. In 1674, 
Gottfried Wilhelm von Leibniz improved Pascal’s machine so that the machine could 
divide and multiply as easily as it could add and subtract. 

When the age of industrialization spread throughout Europe, machines became 
fixtures in agricultural and production sites. An invention that made profound changes 
in the history of industrialization, as well as in the history of computing, was the me- 
chanical loom, invented by a Frenchman named Joseph Jacquard. With the use of 
cards punched with holes, it was possible for the Jacquard loom to weave fabrics in a 
variety of patterns. Jacquard’s loom was controlled by a program encoded into the 
punched cards. The operator created the program once, and was able to duplicate it 
many times over with consistency and accuracy. 

The idea of using punched cards to store a predetermined pattern to be woven by 
the loom clicked in the mind of Charles Babbage, an English mathematician who lived 
in the 19th century. He foresaw a machine that could perform all mathematical calcu- 
lations, store values in its memory, and perform logical comparisons among values. He 
called it the Analytical Engine. Babbage’s analytical engine, however, was never built. 
It lacked one thing: electronics. Herman Hollerith eventually adapted Jacquard’s 


REAL WORLD 


BM researchers and a team of doctors are building a data- 

base of digital images they hope will enable oncologists 

to diagnose and treat cancer patients faster and with 
more success. Researchers at the Cancer Institute of New 
Jersey have digitized CAT scans, MRIs, and other images 
using a high-performance system and computational time on 
the World Community Grid, also known as the world’s larg- 
est public computing grid. 

“Digitizing images should enable doctors to diagnose 
cancers earlier and detect their growth or shrinkage more 
accurately during treatment,” says Robin Willner, vice presi- 
dent of the global community initiatives at IBM. “Right now, 
the doctor is basically eyeballing it when he’s analyzing tis- 
sues and biopsies. They’re trying to figure out what type of 
cancer it is and if there’s been progress during treatment. If 
you digitize the image, you’re able to compare numbers be- 
cause you've turned an image into bits and bytes. Now it’s a 
much more accurate comparison.” 

Researchers have been using the grid to convert hun- 
dreds of thousands of images of cancerous tissues and cells 
into digital images. Once the images are digitized, the grid 
can check the accuracy of the digital information to ensure 
that the bits and bytes are translating into real diagnoses. 
The World Community Grid acts as a virtual supercomputer 
that is based on thousands of volunteers donating their un- 
used computer time. “If we can improve treatment and diag- 
nosis for cancer, that’s great for everybody,” said Willner. 
“There couldn’t be a better use for the grid.” 

The next phase of the project is to build a database that 
will hold hundreds of thousands, if not millions, of these im- 


FIGURE 3.1 


Grid computing technologies avoid the need for 
expensive, dedicated hardware by distributing the 
processing load among commodity-priced equipment. 


Source: © Comstock/PunchStock. 
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IBM, Wachovia, and PayPal: 
Grid Computing Makes It 
Easier and Cheaper 


ages. A $2.5 million grant from the National Institutes of 
Health (NIH) will enable the Cancer Institute of New Jersey, 
Rutgers University, and cancer centers around the country 
to pool their digital images in the database. Willner said the 
database will enable doctors to compare patients’ new images 
to ones already in the database to help them diagnose the 
cancer and figure out the best way to treat it. Doctors should 
be able to use the database to personalize treatments for 
cancer patients based on how other patients with similar 
protein expression signatures and cancers have reacted to 
various treatments. 

“The overarching goal of the new NIH grant is to ex- 
pand the library to include signatures for a wider range of 
disorders and make it, along with the decision-support tech- 
nology, available to the research and clinical communities as 
grid-enabled deployable software,” said David J. Foran, a di- 
rector of the Cancer Institute of New Jersey. “We hope to 
deploy these technologies to other cancer research centers 
around the nation.” 

This isn’t IBM's first foray into the medical arena by any 
means. IBM has also teamed up with the Mayo Clinic to de- 
velop a research facility to advance medical imaging. Re- 
searchers from both the Mayo Clinic and IBM are working 
at the new Medical Imaging Informatics Innovation Center 
in Rochester, Minnesota. Bradley Erickson, chairman of ra- 
diology at the Mayo Clinic, said a joint team is already work- 
ing to find ways to use the Cell chip, mostly known for 
running inside the PlayStation 3 video-game console, in a 
medical imaging system. Erickson said that the technology 
could either reduce work that now takes minutes to a matter 
of seconds, or work that now takes hours to only minutes. 

Grid computing, however, is not limited to nonprofit in- 
stitutions. Financial services firm Wachovia Corp. has freed 
some of its Java-based applications from dedicated servers 
and is allowing these transaction applications to draw com- 
puting power from a 10,000-CPU resource pool on servers 
spread across cities in the United States and in London. 
Wachovia is tapping into computing power that’s available 
on other systems to perform work. That capability allows 
companies to avoid dedicated hardware costs and make better 
use of underutilized hardware. 

‘Tony Bishop, a Wachovia senior vice president and di- 
rector of product management, said that to use dedicated 
systems as an alternative would be “three times the cost in 
terms of capital and people to support it otherwise.” Wachovia 
has eight applications running on its grid that are used in 
internal transactions, such as order management. ‘The servers 
are in New York, Philadelphia, London, and at the com- 
pany’s corporate headquarters in Charlotte, North Carolina. 
Jamie Bernardin, chief technology officer at DataSynapse, 
the company that developed the technology, said that to im- 
prove transaction speeds, the transaction application run- 
ning on it can grow and contract as needed. 
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Because the system can provide resources as needed for 
the applications, Bishop said performance has improved on 
some transactions fivefold. “This ability to speed processing 
means decisions and services can be made and delivered 
more rapidly. As things get more and more automated and 
more and more real time, it will be IT in this business that 
differentiates,” says Bishop. 

A Linux grid is the power behind the payment system at 
PayPal, and it has converted a mainframe believer. Scott 
‘Thompson, the former executive VP of technology solutions 
at Inovant, ran the Visa subsidiary responsible for executing 
Visa credit card transactions worldwide. The VisaNet sys- 
tem was strictly based on IBM mainframes. 

In February 2005, Thompson became chief technology 
officer at the eBay payments company, PayPal, where he 
confronted a young Internet organization building its en- 
tire transaction processing infrastructure on open-source 
Linux and low-cost servers. Hmmmm, he thought at the 
time. “I came from Visa, where I had responsibility for 
VisaNet. It was a fabulous processing system, very big and 
very global. I was intrigued by PayPal. How would you use 
Linux for processing payments and never be wrong, never 
lose messages, never fall behind the pace of transactions?” 
he wondered. 

He now supervises the PayPal electronic payment 
processing system, which is smaller than VisaNet in volume 
and total dollar value of transactions, but it’s growing fast. It 
is currently processing $1,571 worth of transactions per sec- 
ond in 17 different currencies. In 2006, the online payments 
firm, which started out over a bakery in Palo Alto, processed 
a total of $37.6 billion in transactions. It’s headed toward 
$50 billion very soon. 

Now located in San Jose, PayPal grants its consumer 
members options in payment methods: credit cards, debit 
cards, or directly from a bank account. It has 165 million 


CASE STUDY QUESTIONS 


1. Applications for grid computing in this case include 
medical diagnosis and financial transaction processing. 
What other areas do you think would be well suited to 
the use of grid computing and why? Provide several ex- 
amples from organizations other than those included in 
the case. 


2. The joint effort by IBM and the Cancer Institute of 
New Jersey works by digitalizing medical diagnoses on 
the World Community Grid (WCG). What are the ad- 
vantages and disadvantages of relying on a volunteer- 
based network such as this? Provide examples of both. 
Visit the Web site of the WCG to inform your answer. 


3. IBM, Wachovia, and PayPal are arguably large organi- 
zations. However, several vendors have started offering 
computing power for rent to smaller companies, using 
the principles underlying grid computing. How could 
small and medium companies benefit from these tech- 
nologies? Search the Internet for these offerings to help 
you research your answer. 


account holders worldwide, and it has recently added such 
businesses as Northwest Airlines, Southwest Airlines, U.S. 
Airways, and Overstock.com, which now permit PayPal pay- 
ments on their Web sites. 

‘Thompson supervises a payment system that operates on 
about 4,000 servers running Red Hat Linux in the same 
manner that eBay and Google conduct their business on top 
of a grid of Linux servers. “I have been pleasantly surprised 
at how much we’ve been able to do with this approach. It 
operates like a mainframe,” he says. 

As PayPal grows, it’s much easier to grow the grid with 
Intel-based servers than it would be to upgrade a mainframe, 
according to Thompson. “The cost to increase capacity a 
planned 15 or 20 percent in a mainframe environment is 
enormous. It could be in the tens of millions to do a step 
increase. In PayPal’s world, we add hundreds of servers in 
the course of a couple of nights and the cost is in the thou- 
sands, not millions.” 

PayPal takes Red Hat Enterprise Linux and strips out 
all features unnecessary to its business, and then adds pro- 
prietary extensions around security. Another virtue of the 
grid is that PayPal’s 800 engineers can all get a copy of that 
customized system on their development desktops, run 
tests on their raw software as they work, and develop to 
PayPal’s needs faster because they’re working in the target 
environment. That’s harder to do when the core of the data 
center consists of large boxes or mainframes. It’s not cheap 
in either case to install duplicates for developers, says 
‘Thompson. 


Source: Adapted from Sharon Gaudin, “IBM Uses Grid to Advance Cancer 
Diagnosis and Treatment,” Computerworld, January 28, 2008; Patrick Thibodeau, 
“Wachovia Uses Grid Technology to Speed Up Transaction Apps,” Computer- 
world, May 15, 2006; and Charles Babcock, “PayPal Says Linux Grid Can 
Replace Mainframes,” Information Week, November 28, 2007. 


REAL WORLD ACTIVITIES 


1. Grid computing technology is becoming increasingly 
popular and has recently received support from giants 
such as IBM, Sun, and Oracle. Visit their Web sites 
(www.ibm.com, www.sun.com, and www.oracle.com) 
and review their current offerings in this regard. How 
do their products compare to each other? Prepare a 
presentation to share your findings with the class. 


2. One of the main benefits of grid computing arises from 
the possibility of replacing expensive hardware, such as 
mainframes or supercomputers, with commodity-priced 
servers and even personal computers. What about the 
cost of administering so many different servers and the 
power consumption associated with them? Go online to 
search for information that would allow you to compare 
grid computing to more traditional, mainframe-based 
alternatives. Write a report to present your findings. 


FIGURE 3.2 

ENIAC was the first digital 
computer. It is easy to see 
how far we have come in 
the evolution of computers. 
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concept of the punched card to record census data in the late 1880s. Census data were 
translated into a series of holes in a punched card to represent the digits and the letters 
of the alphabet. The card was then passed through a machine with a series of electrical 
contacts that were either turned off or on, depending on the existence of holes in the 
punched cards. These different combinations of off/on situations were recorded by 
the machine and represented a way of tabulating the result of the census. Hollerith’s 
machine was highly successful. It cut the time it took to tabulate the result of the cen- 
sus by two-thirds, and it made money for the company that manufactured Hollerith’s 
machine. In 1911, this company merged with its competitor to form International 
Business Machines (IBM). 

The ENIAC (Electronic Numerical Integrator and Computer) was the first elec- 
tronic digital computer. It was completed in 1946 at the Moore School of Electrical 
Engineering of the University of Pennsylvania. With no moving parts, ENIAC was 
programmable and had the capability to store problem calculations using vacuum 
tubes (about 18,000). 

A computer that uses vacuum tube technology is called a first-generation compu- 
ter. The ENIAC could add in 0.2 of a millisecond, or about 5,000 computations per 
second. The principal drawback of ENIAC was its size and processing ability. It oc- 
cupied more than 1,500 square feet of floor space and could process only one program 
or problem at a time. As an aside, the power requirements for ENIAC were such that 
adjacent common area lighting dimmed during the power up and calculation cycles. 
Figure 3.2 shows the ENIAC complex. 

In the 1950s, Remington Rand manufactured the UNIVAC I (Universal Automatic 
Calculator). It could calculate at the rate of 10,000 additions per second. In 1957, IBM 
developed the IBM 704, which could perform 100,000 calculations per second. 

In the late 1950s, transistors were invented and quickly replaced the thousands of 
vacuum tubes used in electronic computers. A transistor-based computer could per- 
form 200,000-250,000 calculations per second. The transistorized computer repre- 
sents the second generation of computer. It was not until the mid-1960s that the third 
generation of computers came into being. These were characterized by solid state 
technology and integrated circuitry coupled with extreme miniaturization. 

No history of electronic computing would be complete without acknowledging 
Jack Kilby. Kilby was a Nobel Prize laureate in physics in 2000 for his invention 
of the integrated circuit in 1958 while working at Texas Instruments (TI). He is 
also the inventor of the handheld calculator and thermal printer. Without his work 
that generated a patent for a “Solid Circuit made of Germanium,” our worlds, and 
most certainly our computers, would be much different and less productive than we 
enjoy today. 


Source: Photo courtesy of United States Army. 
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Types of 
Computer 
Systems 


In 1971, the fourth generation of computers was characterized by further minia- 
turization of circuits, increased multiprogramming, and virtual storage memory. In 
the 1980s, the fifth generation of computers operated at speeds of 3-5 million calcula- 
tions per second (for small-scale computers) and 10-15 million instructions per sec- 
ond (for large-scale computers). 

The age of microcomputers began in 1975 when a company called MITS intro- 
duced the ALTAIR 8800. The computer was programmed by flicking switches on the 
front. It came as a kit and had to be soldered together. It had no software programs, 
but it was a personal computer available to the consumer for a few thousand dollars 
when most computer companies were charging tens of thousands of dollars. In 1977 
both Commodore and Radio Shack announced that they were going to make personal 
computers. They did, and trotting along right beside them were Steve Jobs and Steve 
Wozniak, who invented their computer in a garage while in college. Mass production 
of the Apple began in 1979, and by the end of 1981, it was the fastest selling of all 
the personal computers. In August 1982 the IBM PC was born, and many would argue 
that the world changed forever as a result. 

Following the introduction of the personal computer in the early 1980s, we used 
our knowledge of computer networks gained in the early days of computing and com- 
bined it with new and innovative technologies to create massive networks of people, 
computers, and data on which anyone can find almost anything: the Internet. ‘Today 
we continue to see amazing advancements in computing technologies. 

Okay, it’s time to slow down a bit and begin our discussion of today’s computer 
hardware. 


‘Today’s computer systems come in a variety of sizes, shapes, and computing capabili- 
ties. Rapid hardware and software developments and changing end-user needs con- 
tinue to drive the emergence of new models of computers, from the smallest handheld 
personal digital assistant/cell phone combinations to the largest multiple-CPU main- 
frames for enterprises. See Figure 3.3. 


FIGURE 3.3 Examples of computer system categories. 


= Microcomputer Systems 
Personal computers, network 
computers, technical workstations, 
personal digital assistants, 
information appliances, etc. 


= Midrange Systems 
Network servers, minicomputers, 
Web servers, multiuser systems, etc. 


= Mainframe Systems 
Enterprise systems, superservers, 
transaction processors, 
supercomputers, etc. 


Microcomputer 
Systems 
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Categories such as mainframe, midrange, and microcomputer systems are still used to 
help us express the relative processing power and number of end users that can be sup- 
ported by different types of computers. These are not precise classifications, and they 
do overlap each other. Thus, other names are commonly given to highlight the major 
uses of particular types of computers. Examples include personal computers, network 
servers, network computers, and technical workstations. 

In addition, experts continue to predict the merging or disappearance of sev- 
eral computer categories. They feel, for example, that many midrange and main- 
frame systems have been made obsolete by the power and versatility of networks 
composed of microcomputers and servers. Other industry experts have predicted 
that the emergence of network computers and information appliances for applica- 
tions on the Internet and corporate intranets will replace many personal comput- 
ers, especially in large organizations and in the home computer market. Still others 
suggest that the concept of nanocomputers (computing devices that are smaller than 
micro) will eventually pervade our entire understanding of personal computing. 
Only time will tell whether such predictions will equal the expectations of industry 
forecasters. 


The entire center of gravity in computing has shifted. For millions of consumers 

and business users, the main function of desktop PCs is as a window to the Internet. 
Computers are now communications devices, and consumers want them to be as cheap 
as possible. 


Microcomputers are the most important category of computer systems for both 
businesspeople and consumers. Although usually called a personal computer, or PC, a 
microcomputer is much more than a small computer for use by an individual as a 
communication device. The computing power of microcomputers now exceeds that 
of the mainframes of previous computer generations, at a fraction of their cost. 
Thus, they have become powerful networked professional workstations for business 
professionals. 

Consider the computing power on the Apollo 11 spacecraft. Most certainly, landing 
men on the moon and returning them safely to earth was an extraordinary feat. The 
computer that assisted them in everything from navigation to systems monitoring was 
equally extraordinary. Apollo 11 had a 2.048 MHz CPU that was built by MIT. ‘Today’s 
standards can be measured in the 4 GHz in many home PCs (MHz is 1 million com- 
puting cycles per second and GHz is 1 billion computing cycles per second). Further, 
the Apollo 11 computer weighed 70 pounds versus today’s powerful laptops weighing 
in as little as 1 pound. This is progress, for sure. 

Microcomputers come in a variety of sizes and shapes for a variety of purposes, as 
Figure 3.4 illustrates. For example, PCs are available as handheld, notebook, laptop, 
tablet, portable, desktop, and floor-standing models. Or, based on their use, they in- 
clude home, personal, professional, workstation, and multiuser systems. Most micro- 
computers are desktops designed to fit on an office desk or laptops for those who want 
a small, portable PC. Figure 3.5 offers advice on some of the key features you should 
consider when acquiring a high-end professional workstation, multimedia PC, or be- 
ginner’s system. This breakdown should give you some idea of the range of features 
available in today’s microcomputers. 

Some microcomputers are powerful workstation computers (technical worksta- 
tions) that support applications with heavy mathematical computing and graphics dis- 
play demands, such as computer-aided design (CAD) in engineering or investment 
and portfolio analysis in the securities industry. Other microcomputers are used as 
network servers. These are usually more powerful microcomputers that coordinate 
telecommunications and resource sharing in small local area networks (LANs) and in 
Internet and intranet Web sites. 
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FIGURE 3.4 Examples of microcomputer systems: 


a. A notebook microcomputer. 
Source: Courtesy of Hewlett-Packard. 


b. The microcomputer as a professional workstation. 
Source: © Royalty Free/Corbis. 


à me 
c. The microcomputer as a technical workstation. 
Source: Courtesy of Hewlett-Packard. 


FIGURE 3.5 Examples of recommended features for the three types of PC users. Note: www.dell.com and 
www.gateway.com are good sources for the latest PC features available. 
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What do you look for in a new PC system? A big, bright screen? Zippy new proces- 
sor? Capacious hard drive? Acres of RAM? Sorry, none of these is a top concern for 
corporate PC buyers. Numerous studies have shown that the price of a new compu- 
ter is only a small part of the total cost of ownership (TCO). Support, maintenance, 
and other intangibles contribute far more heavily to the sum. Let’s take a look at 
three top criteria. 


Solid Performance at a Reasonable Price. Corporate buyers know that their users 
probably aren’t mapping the human genome or plotting trajectories to Saturn. 
They’re doing word processing, order entry, sales contact management, and other 
essential business tasks. They need a solid, competent machine at a reasonable price, 
not the latest whizbang. 

Many organizations are adopting a laptop, rather than desktop, strategy. Using 
this approach, the employee uses his or her laptop while in the office and out in 
the field. With the proliferation of wireless Internet access, this strategy allows 
employees to take the desktop with them wherever they may be—at their desk, in a 
conference room, at a meeting offsite, or in a hotel room in another country. 

One outcome of this strategy is the development and acquisition of more power- 
ful laptops with larger and higher-quality screens. This demand presents a challenge 
to laptop manufacturers to provide higher quality while continuing to make the 
laptop lightweight and portable. 


Operating System Ready. A change in the operating system of a computer is the 
most disruptive upgrade an enterprise has to face. That’s why many corporate buyers 
want their machines to be able to handle current operating systems and anticipated 
new ones. Although most organizations have adopted Windows XP or Vista, some 
enterprises still use operating systems of an earlier vintage. Ultimately, they must be 
able to make the transition to Windows 7 (the newest OS from Microsoft) and even 


to OS versions expected three to five years from now. Primarily, that demand means 
deciding what hard disk space and RAM will be sufficient. 


Connectivity. Networked machines are a given in corporate life, and Internet-ready 
machines are becoming a given. Buyers need machines equipped with reliable wireless 
capabilities. With fewer cables to worry about, wireless networks, especially when 
combined with laptop PCs, contribute to the flexibility of the workplace and the sim- 
plicity of PC deployment. Many organizations are planning for Internet-based appli- 
cations and need machines ready to make fast, reliable, and secure connections. 


Security-Equipped. Most of the data that is processed by networked workstations 
in a modern corporate environment can be considered proprietary, if not mission- 
critical. A major criterion for corporate purchase is the degree to which the device 
can accept or conform to the myriad of security measures in use in that organization. 
Can it accept a USB dongle, smartcard reader, biometric access device, and so forth? 
We will cover this aspect in greater detail in Chapter 13. 


Computer terminals, essentially any device that allows access to a computer, are under- 
going a major conversion to networked computer devices. Dumb terminals, which are 
keyboard/video monitor devices with limited processing capabilities, are being 
replaced by intelligent terminals, which are modified networked PCs or network com- 
puters. Also included are network terminals, which may be Windows terminals that 
depend on network servers for Windows software, processing power, and storage, or 
Internet terminals, which depend on Internet or intranet Web site servers for their 
operating systems and application software. 
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Intelligent terminals take many forms and can perform data entry and some infor- 
mation processing tasks independently. These tasks include the widespread use of 
transaction terminals in banks, retail stores, factories, and other work sites. Exam- 
ples are automated teller machines (ATMs), factory production recorders, airport 
check-in kiosks, and retail point-of-sale (POS) terminals. These intelligent terminals 
use keypads, touch screens, bar code scanners, and other input methods to capture 
data and interact with end users during a transaction, while relying on servers or other 
computers in the network for further transaction processing. 


Network computers (NCs) are a microcomputer category designed primarily for use 
with the Internet and corporate intranets by clerical workers, operational employees, 
and knowledge workers with specialized or limited computing applications. These NCs 
are low-cost, sealed microcomputers with no or minimal disk storage that are linked to 
the network. Users of NCs depend primarily on network servers for their operating 
system and Web browser, application software, and data access and storage. 

One of the main attractions of network computers is their lower TCO (total cost 
of ownership), that is, the total of all costs associated with purchasing, installing, oper- 
ating, and maintaining a computer. Purchase upgrades, maintenance, and support cost 
much less than for full-featured PCs. Other benefits to business include the ease of 
software distribution and licensing, computing platform standardization, reduced end- 
user support requirements, and improved manageability through centralized manage- 
ment and enterprisewide control of computer network resources. 


PCs aren’t the only option: A host of smart gadgets and information appliances—from 
cellular phones and pagers to handheld PCs and Web-based game machines—promise 
Internet access and the ability to perform basic computational chores. 


Handheld microcomputer devices known as personal digital assistants (PDAs) 
are some of the most popular devices in the information appliance category. Web- 
enabled PDAs use touch screens, pen-based handwriting recognition, or keypads 
so that mobile workers can send and receive e-mail, access the Web, and exchange 
information such as appointments, to-do lists, and sales contacts with their desktop 
PCs or Web servers. 

Now a mainstay of PDA technology is the RIM BlackBerry, a small, pager-sized 
device that can perform all of the common PDA functions, plus act as a fully functional 
mobile telephone. What sets this device apart from other wireless PDA solutions is that 
it is always on and connected. A BlackBerry user doesn’t need to retrieve e-mail; the 
e-mail finds the BlackBerry user. Because of this functionality, there is no need to dial 
in or initiate a connection. The BlackBerry doesn’t even have a visible antenna. When 
a user wishes to send or reply to an e-mail, the small keyboard on the device allows text 
entry. Just like a mobile telephone, the BlackBerry is designed to remain on and con- 
tinuously connected to the wireless network, allowing near real-time transfer of e-mail. 
Furthermore, because the BlackBerry uses the same network as most mobile telephone 
services, the unit can be used anywhere that a mobile phone can be used. 

A relatively new entrant to this field (although gaining favor in leaps and bounds) is 
the Apple iPhone (Figure 3.6). iPhone essentially combines three products—a 
revolutionary mobile phone, a wide-screen iPod music and video player with touch con- 
trols, and a breakthrough Internet communications device with desktop-class e-mail, 
Web browsing, maps, and searching—into one small and lightweight handheld device. 
iPhone also introduces an entirely new user interface based on a large, multitouch display 
and pioneering new software, letting users control everything with just their fingers. 

The genesis of the iPhone began with Apple CEO Steve Jobs’ direction that Apple 
engineers investigate touch screens. Apple created the device during a secretive 
and unprecedented collaboration with AT&T Mobility—called Cingular Wireless at 
the time of the phone’s inception—at a development cost of $150 million, by one 


FIGURE 3.6 

The Apple iPhone—a 
revolutionary player in the 
information appliance and 
PDA marketplace. 


Midrange 
Systems 
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Source: Laurens Smak/Alamy. 


estimate. During development, the iPhone was code-named “Purple 2.” The company 
rejected an early “design by committee” built with Motorola in favor of engineering a 
custom operating system, interface, and hardware. 

The iPhone went on sale on June 29, 2007. Apple closed its stores at 2:00 p.m. lo- 
cal time to prepare for the 6:00 p.m. iPhone launch, while hundreds of customers 
lined up at stores nationwide. They sold 270,000 iPhones in the first 30 hours on 
launch weekend. 

In Germany, Deutsche Telekom signed up 70,000 iPhone customers during the 
11-week period of November 9, 2007, to January 26, 2008. In the United Kingdom, it 
has been estimated that 190,000 customers signed with O2 during an 8-week period 
from the November 9, 2007 launch date to January 9, 2008. 

‘The newest generation of iPhone is the 3G. This version accesses data from the 
much faster 3G network and provides for the download of literally thousands of ap- 
plications that allow the iPhone to perform tasks ranging from accessing online bank- 
ing services to acting as a sophisticated leveling device and everything in between. 

The iPhone has truly ushered in an era of software power and sophistication never 
before seen in a mobile device, completely redefining what people can do on a mobile 
phone. We can expect to see even more sophisticated mobile PDA-type devices in the 
future as Moore’s law continues to prevail and the marketplace continues to demand 
more functionality (see the discussion on Moore’s law at the end of Section I for more 
details on this concept). 

Information appliances may also take the form of video-game consoles and other 
devices that connect to your home television set. These devices enable people to surf 
the World Wide Web, send and receive e-mail, and watch television programs, or play 
video games, at the same time. Other information appliances include wireless PDAs 
and Internet-enabled cellular and PCS phones, as well as wired, telephone-based 
home appliances that can send and receive e-mail and access the Web. 


Midrange systems are primarily high-end network servers and other types of servers 
that can handle the large-scale processing of many business applications. Although not 
as powerful as mainframe computers, they are less costly to buy, operate, and maintain 
than mainframe systems and thus meet the computing needs of many organizations. 
See Figure 3.7. 
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FIGURE 3.7 


Midrange computer systems 
can handle large-scale 
processing without the high 
cost or space considerations 
of a large-scale mainframe. 


Source: China Foto Press/Getty Images. 


Burgeoning data warehouses and related applications such as data mining and online 
analytical processing are forcing IT shops into higher and higher levels of server configu- 
rations. Similarly, Internet-based applications, such as Web servers and electronic 
commerce, are forcing IT managers to push the envelope of processing speed and storage 
capacity and other [business] applications, fueling the growth of high-end servers. 


Midrange systems have become popular as powerful network servers (computers 
used to coordinate communications and manage resource sharing in network settings) 
to help manage large Internet Web sites, corporate intranets and extranets, and other 
networks. Internet functions and other applications are popular high-end server 
applications, as are integrated enterprisewide manufacturing, distribution, and financial 
applications. Other applications, like data warehouse management, data mining, and 
online analytical processing (which we will discuss in Chapters 5 and 10), are contribut- 
ing to the demand for high-end server systems. 

Midrange systems first became popular as minicomputers for scientific research, 
instrumentation systems, engineering analysis, and industrial process monitoring and 
control. Minicomputers could easily handle such uses because these applications are 
narrow in scope and do not demand the processing versatility of mainframe systems. 
‘Today, midrange systems include servers used in industrial process-control and manu- 
facturing plants and play major roles in computer-aided manufacturing (CAM). They 
can also take the form of powerful technical workstations for computer-aided design 
(CAD) and other computation and graphics-intensive applications. Midrange systems 
are also used as front-end servers to assist mainframe computers in telecommunications 
processing and network management. 


And the Oscar An initial implementation of 500 blade servers soon grew to 2,000 to meet the 

Goes to. processing capacity requirements for creating the Oscar-winning animated film 
a Happy Feet. The 108-minute computer-generated animated feature, which won an 

Penguins and Academy Award in 2006, was put together by digital production company The Ani- 

2,000 Blade mal Logic Group. 

Savas “We needed huge numbers of processors in a form factor and price level 


that would work for our business,” says Xavier Desdoigts, director of technical 
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operations. “We had to render 140,000 frames, and each frame could take many 
hours to render. The photorealistic look of the movie made our computational re- 
quirements soar to new heights.” 

For example, Mumble, the main character in the movie, had up to 6 million 
feathers. “There were six shots in the movie that had more than 400,000 penguins in 
them,” Desdoigts explained. This added up to over 17 million CPU hours used 
throughout the last nine months of Happy Feet production. “We were initially con- 
cerned about our ability to build and manage a processing capacity of that scale.” 

Animal Logic and IBM built a rendering server farm using BladeCenter 
HS20 blade servers, each with two Intel Xeon servers. Rendering was completed in 
October 2006, and the film was released the following month in the United States. 
Management tools to deploy and control the servers while in production included an 
open-source package for administering computing clusters. For Animal Logic, the 
biggest sign of success from an IT perspective was that the entire server farm was 
managed by a single person. 

“We have to make sure we choose solutions that aren’t overly complex to set up 
or manage, so our focus can stay on realizing the creative visions of our clients,” 
Desdoigts said. Happy Feet quickly became one of the Australian film industry’s great- 
est box-office successes, taking the No. 1 spot in the United States for three con- 
secutive weeks. It made more than $41 million (U.S.) on its opening weekend and 
showed on 3,800 cinema screens. 


Source: Adapted from Sandra Rossi, “And the Oscar Goes to . . . Jovial Penguins and 2,000 Blade Servers,” Computerworld 
Australia, March 6, 2007. 


Several years after dire pronouncements that the mainframe was dead, quite the opposite 
is true: Mainframe usage is actually on the rise. And it’s not just a short-term blip. 

One factor that’s been driving mainframe sales is cost reductions [of 35 percent or more]. 
Price reductions aren’t the only factor fueling mainframe acquisitions. IS organizations 
are teaching the old dog new tricks by putting mainframes at the center stage of emerging 
applications such as data mining and warehousing, decision support, and a variety of 
Internet-based applications, most notably electronic commerce. 


Mainframe systems are large, fast, and powerful computer systems. For example, 
mainframes can process thousands of million instructions per second (MIPS). Main- 
frames can also have large primary storage capacities. Their main memory capacity 
can range from hundreds of gigabytes to many terabytes of primary storage. Main- 
frames have slimmed down drastically in the last few years, dramatically reducing their 
air-conditioning needs, electrical power consumption, and floor space requirements— 
and thus their acquisition and operating costs. Most of these improvements are the 
result of a move from cumbersome water-cooled mainframes to a newer air-cooled 
technology for mainframe systems. See Figure 3.8. 

Thus, mainframe computers continue to handle the information processing needs 
of major corporations and government agencies with high transaction processing 
volumes or complex computational problems. For example, major international banks, 
airlines, oil companies, and other large corporations process millions of sales transac- 
tions and customer inquiries each day with the help of large mainframe systems. Main- 
frames are still used for computation-intensive applications, such as analyzing seismic 
data from oil field explorations or simulating flight conditions in designing aircraft. 
Mainframes are also widely used as superservers for the large client/server networks 
and high-volume Internet Web sites of large companies. As previously mentioned, 
mainframes are becoming a popular business computing platform for data mining and 
warehousing, as well as electronic commerce applications. 
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FIGURE 3.8 
Mainframe computer 
systems are the heavy lifters 
of corporate computing. 


Source: © Royalty Free/Corbis. 


Supercomputer Supercomputers have now become “scalable servers” at the top end of the product lines 

Systems that start with desktop workstations. Market-driven companies, like Silicon Graphics, 
Hewlett-Packard, and IBM, have a much broader focus than just building the world’s 
fastest computer, and the software of the desktop computer bas a much greater overlap 
with that of the supercomputer than it used to, because both are built from the same 
cache-based microprocessors. 


The term supercomputer describes a category of extremely powerful computer 
systems specifically designed for scientific, engineering, and business applications 
requiring extremely high speeds for massive numeric computations. The market for 
supercomputers includes government research agencies, large universities, and major 
corporations. They use supercomputers for applications such as global weather fore- 
casting, military defense systems, computational cosmology and astronomy, micro- 
processor research and design, and large-scale data mining. 

Supercomputers use parallel processing architectures of interconnected microproc- 
essors (which can execute many instructions at the same time in parallel). They can 
easily perform arithmetic calculations at speeds of billions of floating-point operations 
per second (gigaflops). Supercomputers that can calculate in teraflops (trillions of floating- 
point operations per second), which use massive parallel processing (MPP) designs of 
thousands of microprocessors, are now in use. Purchase prices for large supercom- 
puters are in the $5 million to $50 million range. 

The use of symmetric multiprocessing (SMP) and distributed shared memory 
(DSM) designs of smaller numbers of interconnected microprocessors has spawned a 
breed of minisupercomputers with prices that start in the hundreds of thousands of dol- 
lars. For example, IBM’s RS/6000 SP system starts at $150,000 for a one-processing- 
node SMP computer. However, it can be expanded to hundreds of processing nodes, 
which drives its price into the tens of millions of dollars. 

The ASCI White supercomputer system, shown in Figure 3.9, consists of three IBM 
RS/6000 SP systems: White, Frost, and Ice. White, the largest of these systems, is a 
512-node, 16-way SMP supercomputer with a peak performance of 12.3 teraflops. Frost 
is a 68-node, 16-way SMP system; and Ice is a 28-node, 16-way SMP system. Supercom- 
puters like these continue to advance the state of the art for the entire computer industry. 


FIGURE 3.9 

The ASCI White 
supercomputer system at 
Lawrence Livermore 
National Laboratory in 
Livermore, California. 
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Source: Image courtesy of Silicon Graphics, Inc. 


Satellite launches are a noisy affair, especially for the satellite atop the rocket. Vibra- 
tion and noise, unless compensated, could render it useless before it reaches orbit, so 
researchers spend a lot of time on complex computer simulations that help them in- 
sulate the delicate craft. Now those simulations are about to get much more accurate, 
thanks to a new supercomputer that recently began work in Japan. 

The Fujitsu FX1 computer was inaugurated in 2009 by the Japan Aerospace Ex- 
plorations Agency (JAXA). It has 3,008 nodes, each of which has a 4-core Sparc64 
VII microprocessor. The machine has 94 terabytes of memory and a theoretical peak 
performance of 120 teraflops. Running standard benchmarks, it achieved a peak per- 
formance of 110.6 teraflops, which ranks it not only the most powerful machine in 
Japan but also the most efficient supercomputer in the world. Its peak performance 
represents 91.2 percent of its theoretical performance and outranks the previous 
record holder, a machine at the Leibniz Rechenzentrum in Munich. Ranked below 
the German computer is another JAXA machine. “Performance is about 15 times 
higher than the system we had before,” said Kozo Fujii, director of JAXA’s Engineering 
Digital Innovation Center. 

‘Iwo rows of computer racks make up the main system and a third row alongside 
is a second less powerful FX1 machine. In an adjoining room sits an NEC SX-9 vec- 
tor computer for running specialized tasks and the storage that augments the entire 
system. Altogether a petabyte of disk storage space and 10 petabytes of tape storage 
are connected to the system (a petabyte is a million gigabytes). And between the lot 
there are lots of big, industrial air conditioners to keep the room cool and extract the 
heat generated by this mass of hardware. 

JAXA intends to put it to work on simulations such as the acoustic noise experi- 
enced by a satellite at launch, said Fujii. “There is a wide band of frequencies and 
usually the peak frequencies are located between 60 and 100 Hertz and we can cap- 
ture at that level of frequencies. But hopefully with the new computer we can capture 
frequencies of 150 or 200 Hz that are difficult for the current computer.” 


Source: Adapted from Martyn Williams, “World’s Most Efficient Supercomputer Gets to Work,” CIO Magazine, 
April 2, 2009. 
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Interconnecting microprocessors to create minisupercomputers is a reality, as dis- 
cussed in the previous section. The next wave is looking at harnessing the virtually 
infinite amount of unused computing power that exists in the myriad of desktops and 
laptops within the boundaries of a modern organization. 

Distributed or grid computing in general is a special type of parallel computing 
that relies on complete computers (with onboard CPU, storage, power supply, net- 
work interface, and so forth) connected to a network (private, public, or the Inter- 
net) by a conventional network interface. This is in contrast to the traditional notion 
of a supercomputer, which has many processors connected together in a single ma- 
chine. The grid could be formed by harnessing the unused CPU power in all of the 
desktops and laptops in a single division of a company (or in the entire company, for 
that matter). 

The primary advantage of distributed computing is that each node can be pur- 
chased as commodity hardware; when combined, it can produce similar computing 
resources to a multiprocessor supercomputer, but at a significantly lower cost. This 
is due to the economies of scale of producing desktops and laptops, compared with 
the lower efficiency of designing and constructing a small number of custom super- 
computers. 

One feature of distributed grids is that they can be formed from computing re- 
sources belonging to multiple individuals or organizations (known as multiple admin- 
istrative domains). This can facilitate commercial transactions or make it easier to 
assemble volunteer computing networks. 

A disadvantage of this feature is that the computers that are actually performing 
the calculations might not be entirely trustworthy. The designers of the system must 
thus introduce measures to prevent malfunctions or malicious participants from pro- 
ducing false, misleading, or erroneous results, and from using the system as a platform 
for a hacking attempt. This often involves assigning work randomly to different nodes 
(presumably with different owners) and checking that at least two different nodes re- 
port the same answer for a given work unit. Discrepancies would identify malfunc- 
tioning and malicious nodes. 

Another challenge is that because of the lack of central control over the hardware, 
there is no way to guarantee that computers will not drop out of the network at ran- 
dom times. Some nodes (like laptops or dial-up Internet customers) may also be avail- 
able for computation but not for network communications for unpredictable periods. 
These variations can be accommodated by assigning large work units (thus reducing 
the need for continuous network connectivity) and reassigning work units when a 
given node fails to report its results as expected. 

Despite these challenges, grid computing is becoming a popular method of getting 
the most out of the computing resources of an organization. 


As a business professional, you do not need detailed technical knowledge of comput- 
ers. However, you do need to understand some basic concepts about computer sys- 
tems, which should help you be an informed and productive user of computer system 
resources. 

A computer is more than a high-powered collection of electronic devices 
performing a variety of information processing chores. A computer is a system, an 
interrelated combination of components that performs the basic system functions 
of input, processing, output, storage, and control, thus providing end users with a 
powerful information processing tool. Understanding the computer as a computer 
system is vital to the effective use and management of computers. You should 
be able to visualize any computer this way, from the smallest microcomputer 
device to the largest computer networks whose components are interconnected 
by telecommunications network links throughout a building complex or geo- 
graphic area. 
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FIGURE 3.10 The computer system concept. A computer is a system of hardware components and functions. 
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Figure 3.10 illustrates that a computer is a system of hardware devices organized 


according to the following system functions: 


Input. The input devices of a computer system include computer keyboards, 
touch screens, pens, electronic mice, and optical scanners. They convert data into 
electronic form for direct entry or through a telecommunications network into a 
computer system. 


Processing. The central processing unit (CPU) is the main processing compo- 
nent of a computer system. (In microcomputers, it is the main microprocessor. See 
Figure 3.11.) Conceptually, the circuitry of a CPU can be subdivided into two 
major subunits: the arithmetic-logic unit and the control unit. The electronic cir- 
cuits (known as registers) of the arithmetic-logic unit perform the arithmetic and 
logic functions required to execute software instructions. 


Output. The output devices of a computer system include video display units, 
printers, and audio response units. They convert electronic information pro- 
duced by the computer system into human-intelligible form for presentation 
to end users. 


Storage. The storage function of a computer system takes place in the stor- 

age circuits of the computer’s primary storage unit, or memory, supported by 
secondary storage devices such as magnetic disk and optical disk drives. These 
devices store data and software instructions needed for processing. Computer 
processors may also include storage circuitry called cache memory for high-speed, 
temporary storage of instruction and data elements. 


Control. The control unit of a CPU is the control component of a computer 
system. Its registers and other circuits interpret software instructions and 
transmit directions that control the activities of the other components of the 
computer system. 


We will explore the various hardware devices associated with each of these system 


functions in the next section of this chapter. 
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FIGURE 3.11 

Mobile CPU chips, such 

as the one shown here, can 
reach speeds up to 3 Ghz 
to bring desktop-like power 
to a mobile setting. 
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How fast are computer systems? Early computer processing speeds were measured in 
milliseconds (thousandths of a second) and microseconds (millionths of a second). 
Now computers operate in the nanosecond (billionth of a second) range, with picosec- 
ond (trillionth of a second) speed being attained by some computers. Such speeds 
seem almost incomprehensible. For example, an average person taking one step each 
nanosecond would circle the earth about 20 times in one second! 

We have already mentioned the teraflop speeds of some supercomputers. How- 
ever, most computers can now process program instructions at million instructions 
per second (MIPS) speeds. Another measure of processing speed is megahertz (MHz), 
or millions of cycles per second, and gigahertz (GHz), or billions of cycles per second. 
This rating is commonly called the clock speed of a microprocessor because it is used 
to rate microprocessors by the speed of their timing circuits or internal clock rather 
than by the number of specific instructions they can process in one second. 

However, such ratings can be misleading indicators of the effective processing 
speed of microprocessors and their throughput, or ability to perform useful computa- 
tion or data processing assignments during a given period. That’s because processing 
speed depends on a variety of factors, including the size of circuitry paths, or buses, 
that interconnect microprocessor components; the capacity of instruction-processing 
registers; the use of high-speed cache memory; and the use of specialized microproces- 
sors such as a math coprocessor to do arithmetic calculations faster. 


Can computers get any faster? Can we afford the computers of the future? Both 
of these questions can be answered by understanding Moore’s law. Gordon Moore, 
cofounder of Intel Corporation, made his famous observation in 1965, just four years 
after the first integrated circuit was commercialized. The press called it “Moore’s law,” 
and the name has stuck. In its form, Moore observed an exponential growth (doubling 
every 18 to 24 months) in the number of transistors per integrated circuit and pre- 
dicted that this trend would continue. Through a number of advances in technology, 
Moore’s law, the doubling of transistors every couple of years, has been maintained 
and still holds true today. Figure 3.12 illustrates Moore’s law as it relates to the evolu- 
tion of computing power. 


FIGURE 3.12 


Moore’s law suggests that 
computer power will 
double every 18 to 24 
months. So far, it has. 
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Despite our regular use of exponential growth when predicting the future, particu- 
larly the future of technology, humans are often not very good at realizing what ex- 
ponential growth really looks like. To understand this issue better, let’s take a moment 
to reflect on what Moore’s law would mean to us if it applied beyond the number of 
transistors on a computer chip: 


e According to Moore’s law, the estimated number of transistors shipped in 2003 
was 10!8. That’s just about 100 times the estimated number of ants in the world. 


e In 1978, a commercial flight between New York and Paris cost about $900 
and took about seven hours. If Moore’s law could be applied to commercial 
aviation, that same flight today would cost about a penny and would take less 
than one second. 


Over the years, Moore’s law has been interpreted and reinterpreted such that it is 
commonly defined in a much broader sense than it was originally offered. Nonethe- 
less, its application, and its relative accuracy, is useful in understanding where we have 
been and in predicting where we are going. For example, one common corollary of 
Moore’s law is that the price of a given level of computing power will be cut in half 
approximately every 18 to 24 months. Moore didn’t specifically predict this effect, but 
it has been shown to be rather consistently accurate as well. This trend is also true for 
the cost of storage (we will explore this further in the next section). 

Although Moore’s law was initially made in the form of an observation and predic- 
tion, the more widely it became accepted, the more it served as a goal for an entire 
industry. This caused both marketing and engineering departments of semiconductor 
manufacturers to focus enormous energy on the specified increase in processing power 
that it was presumed one or more of their competitors would soon actually attain. 
Expressed as “a doubling every 18 to 24 months,” Moore’s law suggests the phenom- 
enal progress of technology in recent years. Expressed on a shorter timescale, how- 
ever, Moore’s law equates to an average performance improvement in the industry as 
a whole of more than 1 percent per week. For a manufacturer competing in the proces- 
sor, storage, or memory markets, a new product that is expected to take three years to 
develop and is just two or three months late is 10-15 percent slower or larger than the 
directly competing products, thus rendering it harder to sell. 

A sometimes misunderstood point is that exponentially improved hardware does 
not necessarily imply that the performance of the software is also exponentially 
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improved. The productivity of software developers most assuredly does not increase 
exponentially with the improvement in hardware; by most measures, it has increased 
only slowly and fitfully over the decades. Software tends to get larger and more com- 
plicated over time, and Wirth’s law (Niklaus Wirth, a Swiss computer scientist) even 
states humorously that “Software gets slower faster than hardware gets faster.” 

Recent computer industry studies predict that Moore’s law will continue to hold 
for the next several chip generations (at least another decade). Depending on the 
doubling time used in the calculations, this progress could mean up to a 100-fold 
increase in transistor counts on a chip in the next 10 years. This rapid exponential 
improvement could put 100 GHz personal computers in every home and 20 GHz 
devices in every pocket. It seems reasonable to expect that sooner or later computers 
will meet or exceed any conceivable need for computation. Intel, however, suggests 
that it can sustain development in line with Moore’s law for the next 20 years without 
any significant technological breakthroughs. Given the frequency of such break- 
throughs in today’s marketplace, it is conceivable that Moore’s law can be sustained 
indefinitely. Regardless of what the end of Moore’s law may look like, or when it may 
arrive, we are still moving along at a phenomenal rate of evolution, and the best may 
be yet to come. 


SECTION II 


Peripherals 


Input 
Technologies 


Pointing Devices 
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Computer Peripherals: Input, 
Output, and Storage Technologies 


The right peripherals can make all the difference in your computing experience. A 
top-quality monitor will be easier on your eyes—and may change the way you work. 

A scanner can edge you closer to that ever-elusive goal: the paperless office. Backup-storage 
systems can offer bank-vault security against losing your work. CD and DVD drives 
have become essential for many applications. Thus, the right choice of peripherals can 
make a big difference. 


Read the Real World Case 2 about touch screens. We can learn a lot about the future of the 
human-computer interface and its business applications from this case. See Figure 3.13. 


Peripherals is the generic name given to all input, output, and secondary storage de- 
vices that are part of a computer system but are not part of the CPU. Peripherals de- 
pend on direct connections or telecommunications links to the central processing unit 
of a computer system. Thus, all peripherals are online devices; that is, they are sepa- 
rate from, but can be electronically connected to and controlled by, a CPU. (This is 
the opposite of off-line devices that are separate from and not under the control of the 
CPU.) The major types of peripherals and media that can be part of a computer sys- 
tem are discussed in this section. See Figure 3.14. 


Input technologies now provide a more natural user interface for computer users. 
You can enter data and commands directly and easily into a computer system through 
pointing devices like electronic mice and touch pads and with technologies like optical 
scanning, handwriting recognition, and voice recognition. These developments have 
made it unnecessary to record data on paper source documents (e.g., sales order forms) 
and then keyboard the data into a computer in an additional data-entry step. Further 
improvements in voice recognition and other technologies should enable an even 
more natural user interface in the future. 


Keyboards are still the most widely used devices for entering data and text into com- 
puter systems. However, pointing devices are a better alternative for issuing com- 
mands, making choices, and responding to prompts displayed on your video screen. 
They work with your operating system’s graphical user interface (GUI), which 
presents you with icons, menus, windows, buttons, and bars for your selection. For 
example, pointing devices such as an electronic mouse, trackball, and touch pads allow 
you to choose easily from menu selections and icon displays using point-and-click or 
point-and-drag methods. See Figure 3.15. 

The electronic mouse is the most popular pointing device used to move the 
cursor on the screen, as well as issue commands and make icon and menu selections. 
By moving the mouse on a desktop or pad, you can move the cursor onto an icon 
displayed on the screen. Pressing buttons on the mouse initiates various activities rep- 
resented by the icon selected. 

The trackball, pointing stick, and touch pad are other pointing devices most often 
used in place of the mouse. A trackball is a stationary device related to the mouse. 
You turn a roller ball with only its top exposed outside its case to move the cursor on 
the screen. A pointing stick (also called a trackpoint) is a small button-like device, 
sometimes likened to the eraser head of a pencil. It is usually centered one row above 
the space bar of a keyboard. The cursor moves in the direction of the pressure you place 
on the stick. The touch pad is a small rectangular touch-sensitive surface usually placed 
below the keyboard. The cursor moves in the direction your finger moves on the pad. 
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REAL WORLD 


CASE 


he WIMP human-computer interface may have an 

uninspiring name, but Windows, Icons, Menus, and 

Pointing (WIMP) devices have dominated comput- 
ing for some 15 years. The keyboard, mouse, and display 
screen have served users extraordinarily well. 

Now the hegemony of WIMP may be coming to an end, 
say developers of technologies based on human touch and 
gesture. For evidence, look no further than Apple’s iPhone. 
From a human-interface point of view, the combined display 
and input capabilities of the iPhone’s screen, which can be 
manipulated by multiple fingers in a variety of intuitive 
touches and gestures, is nothing short of revolutionary. 

The iPhone isn’t the only commercial device to take the 
human-computer interface to a new level. The Microsoft 
Surface computer puts input and output devices in a large, 
tabletop device that can accommodate touches and gestures 
and even recognize physical objects laid on it. In addition, 
the DiamondTouch ‘Table from Mitsubishi is a touch- and 
gesture-activated display that supports small-group collabo- 
ration. It can even tell who is touching it. 

These devices point the way toward an upcoming era of 
more natural and intuitive interaction between human and 
machine. Robert Jacob, a computer science professor at Tufts 
University, says touch is just one component of a booming 
field of research on post-WIMP interfaces, a broad coalition 
of technologies he calls reality-based interaction. Those 
technologies include virtual reality, context-aware comput- 
ing, perceptual and affective computing, and tangible 
interaction, in which physical objects are recognized directly 
by a computer. 


FIGURE 3.13 


New human interface technologies promise to 
revolutionize the way we interact with computers. 


Source: McGraw-Hill Companies, Inc./John Flournoy, photographer. 


Apple, Microsoft, IBM, and Others: 
The Touch Screen Comes of Age 


“What’s similar about all these interfaces is that they are 
more like the real world,” Jacob says. For example, the 
iPhone “uses gestures you know how to do right away, such 
as touching two fingers to an image or application, then 
pulling them apart to zoom in or pinching them together to 
zoom out.” These actions have also found their way into the 
iPod ‘Touch and the track pad of the new MacBook Air. “Just 
think of the brain cells you don’t have to devote to remem- 
bering the syntax of the user interface! You can devote those 
brain cells to the job you are trying to do.” In particular, he 
says, the ability of the iPhone to handle multiple touches at 
once is a huge leap past the single-touch technology that 
dominates in traditional touch applications such as ATMs. 

Although they have not gotten much traction in the 
marketplace yet, advanced touch technologies from IBM 
may point a way to the future. In its Everywhere Displays 
Project, IBM mounts projectors in one or more parts of an 
ordinary room and projects images of touch screens onto 
ordinary surfaces, such as tables, walls, or the floor. Video 
cameras capture images of users touching various parts of 
the surfaces and send that information for interpretation 
by a computer. The touch screens contain no electronics— 
indeed, no computer parts at all—so they can be easily 
moved and reconfigured. 

A variation on that concept has been deployed by a wine 
store in Germany, says Claudio Pinhanez at IBM Research. 
The METRO Future Store in Rheinberg has a kiosk that 
enables customers to get information about the wines the 
store stocks. “But the store’s inventory was so vast customers 
often had trouble finding the particular wine they wanted on 
the shelf. They often ended up buying a low-margin wine in 
a nearby bin of sales specials,” Pinhanez says. Now the kiosk 
contains a “show me” button that, when pressed, shines a 
spotlight on the floor in front of the chosen item. 

IBM is also working on a prototype system for grocery 
stores that might, for example, illuminate a circle on the floor 
that asks, “Do you want to take the first steps toward more 
fiber in your diet?” If the customer touches “yes” with his 
foot, the system projects footsteps to the appropriate prod- 
ucts, such as high-fiber cereal. “Then you could make the ce- 
real box itself interactive,” says Pinhanez. “You touch it, and 
the system would project information about that box on a 
panel above the shelf.” Asked if interactive cereal boxes might 
be a solution in search of a problem, Pinhanez says, “The 
point is, with projection and camera technology you can 
transform any everyday object into a touch screen.” He says 
alternatives that are often discussed (e.g., a store system that 
talks to customers through their handheld devices) are hard to 
implement because of a lack of standards for the technology. 

Microsoft is working with several commercial partners, 
including Starwood Hotels & Resorts, which owns the pres- 
tigious Sheraton, W, Westin, and Méridien brands, among 
others, to introduce Surface. It will initially target leisure, 


entertainment, and retail applications, says Mark Bolger, di- 
rector of marketing for Surface Computing. For example, he 
says, one could imagine a hotel guest using a virtual con- 
cierge in a Surface computer in the lobby to manipulate 
maps, photos, restaurant menus, and theater information. 

Some researchers say that a logical extension of touch 
technology is gesture recognition, by which a system recog- 
nizes hand or finger movements across a screen or close to it 
without requiring an actual touch. “Our technology is half- 
way there,” IBM’s Pinhanez says, “because we recognize the 
gesture of touching rather than the occlusion of a particular 
area. You can go over buttons without triggering them.” 

Patrick Baudisch at Microsoft Research says the Microsoft 
prototypes can already act on finger gestures, with the system 
recognizing finger motions, as well as positions, and under- 
standing the meaning of different numbers of fingers. For ex- 
ample, the motion of one finger is seen as equivalent to a 
mouse movement, a finger touch is interpreted as a click, and 
two fingers touching and moving is seen as a scroll command. 

‘Touch technology in its many variations is an idea whose 
time has come. “It’s been around a long time, but traditionally 
in niche markets. The technology was more expensive, and 
there were ergonomic problems,” he says. “But it’s all kind of 
coming together right now.” The rise of mobile devices is a big 
catalyst, because the devices are getting smaller and their 
screens are getting bigger. When a screen covers the entire 
device, there is no room for conventional buttons, which makes 
it necessary to have other types of interaction (e.g., voice). 

Of course, researchers and inventors have envisioned 
even larger touch displays, including whole interactive walls. 
A quick YouTube search for “multitouch wall” shows that a 
number of these fascinating devices have reached the proto- 
type stage, causing multitudes at technology conferences to 
be entranced. Experts predict, however, that this is just the 
beginning. 

Pradeep Khosla, professor of electrical and computer 
engineering and robotics at Carnegie Mellon University in 
Pittsburgh, says touch technology will proliferate, but not by 
itself. “When we talk face to face, I make eye gestures, face 


CASE STUDY QUESTIONS 


1. What benefits may Starwood Hotels derive from the 
introduction of touch-screen technology, as noted in 
the case? What possible disruptions may occur as a 
result? Provide several examples of each. 


2. Bill Buxton of Microsoft stated that “[t]ouch now may 
be where the mouse was in about 1983.” What do you 
make of his comments, and what do you think it would 
take for touch technology to displace the WIMP inter- 
face? Justify your answer. 


3. Is advanced touch-screen technology really a solution in 
search of a problem? Do you agree with this statement? 
Why or why not? 
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gestures, hand gestures, and somehow you interpret them all 
to understand what I am saying. I think that’s where we are 
headed,” he says. “There is room for all these things, and 
multimodal gestures will be the future.” 

Bill Buxton, a researcher at Microsoft, also anticipates a 
fusion of different interaction technologies. “Touch now 
may be where the mouse was in about 1983,” Buxton says. 
“People now understand there is something interesting here 
that’s different. But I don’t think we yet know what that dif- 
ference could lead to. Until just one or two years ago there 
was a real separation between input devices and output de- 
vices. A display was a display and a mouse was a mouse.” 

“There’s been this notion that less is more—you try to get 
less and less stuff to reduce complexity,” he says. “But there’s 
this other view that more is actually less—more of the right 
stuff in the right place, and complexity disappears.” In the of- 
fice of the future, Buxton predicts, desktop computers might 
be much the same as they are today. “But you can just throw 
stuff, with the mouse or a gesture, up onto a wall or white- 
board and then work with it with your hands by touch and 
gesture standing up. Then you'll just pull things into your mo- 
bile and have this surface in your hand. The mobile, the wall, 
the desktop—they are all suitable for different purposes.” 

Will that be the end of the WIMP interface? Tufts Uni- 
versity’s Jacob advises users not to discard their keyboards 
and mice anytime soon. “They really are extremely good,” 
he says. “WIMP almost completely dislodged the command- 
line interface. The WIMP interface was such a good inven- 
tion that people just kind of stopped there, but I can’t believe 
it’s the end of the road forever.” 

Buxton agrees. “WIMP is the standard interface going 
back 20-plus years, and all the applications have been built 
around that,” he says. “The challenge is, without throwing 
the baby out with the bath, how do we reap the benefits of 
these new approaches while preserving the best parts of the 
things that exist?” 


Source: Adapted from Gary Anthes, “Give Your Computer the Finger: Touch- 
Screen Tech Comes of Age,” Computerworld, February 1, 2008. 


REAL WORLD ACTIVITIES 


1. Most of the fame attached to the iPhone has resulted 


from individual, end-user applications. How could 
companies use the iPhone as a platform for commercial 
use? Break into small groups and brainstorm some 
possible uses of the technology, as well as what benefits 
organizations can derive from them. Then prepare a 
presentation to share your ideas with the class. 


2. Information technology advances rapidly, and touch 
screen is no exception. Go online and search for devel- 
opments more recent than those mentioned in the case. 
What new large-scale (i.e., wall-sized) applications 

could you find? Prepare a report comparing new devel- 

opments with the examples mentioned here. 
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Peripherals Checklist 


FIGURE 3.14 


Some advice about 
peripherals for a 
business PC. 


Pen-Based 
Computing 


Monitors. Bigger is better for computer screens. Consider a high-definition 19-inch 
or 21-inch flat screen CRT monitor, or LCD flat-panel display. That gives you much 
more room to display spreadsheets, Web pages, lines of text, open windows, and so on. 
An increasingly popular setup uses two monitors that allow multiple applications to be 
used simultaneously. 


Printers. Your choice is between laser printers and color inkjet printers. Lasers are 
better suited for high-volume business use. Moderately priced color inkjets provide 
high-quality images and are well suited for reproducing photographs; per-page costs 
are higher than for laser printers. 


Scanners. You'll have to decide between a compact, sheet-fed scanner and a flatbed 
model. Sheet-fed scanners will save desktop space, while bulkier flatbed models provide 
higher speed and resolution. 


Hard Disk Drives. Bigger is better; as with closet space, you can always use the extra 
capacity. So go for 80 gigabytes at the minimum to 160 gigabytes and more. 


CD and DVD Drives. CD and DVD drives are a necessity for software installation 
and multimedia applications. Common today is a built-in CD-RW/DVD drive that 
both reads and writes CDs and plays DVDs. 


Backup Systems. Essential. Don’t compute without them. Removable mag disk drives 
and even CD-RW and DVD-RW drives are convenient and versatile for backing up 
your hard drive’s contents. 


‘Trackballs, pointing sticks, and touch pads are easier to use than a mouse for portable 


computer users and are thus built into most notebook computer keyboards. 


Touch screens are devices that allow you to use a computer by touching the sur- 


face of its video display screen. Some touch screens emit a grid of infrared beams, 
sound waves, or a slight electric current that is broken when the screen is touched. 


The computer senses the point in the grid where the break occurs and responds with 


an appropriate action. For example, you can indicate your selection on a menu display 
just by touching the screen next to that menu item. 


Handuwriting-recognition systems convert script into text quickly and are friendly to 

shaky hands as well as those of block-printing draftsmen. The pen is more powerful than 
the keyboard in many vertical markets, as evidenced by the popularity of pen-based devices 
in the utilities, service, and medical trades. 


FIGURE 3.15 Many choices exist for pointing devices including the trackball, mouse, pointing stick, and touch screen. 


Source: (left to right) Courtesy of Logitech, Microsoft®, IBM, and © AP/Wide World Photos. 


FIGURE 3.16 
Many PDAs accept 
pen-based input. 


Speech Recognition 
Systems 
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Source: ©Comstock/PunchStock. 


Pen-based computing technologies are still being used in many handheld comput- 
ers and personal digital assistants. Despite the popularity of touch-screen technologies, 
many still prefer the use of a stylus rather than their fingertip. Tablet PCs and PDAs con- 
tain fast processors and software that recognizes and digitizes handwriting, handprinting, 
and hand drawing. They have a pressure-sensitive layer, similar to that of a touch screen, 
under their slate-like liquid crystal display (LCD) screen. Instead of writing on a paper 
form fastened to a clipboard or using a keyboard device, you can use a pen to make selec- 
tions, send e-mail, and enter handwritten data directly into a computer. See Figure 3.16. 

Various pen-like devices are available. One example is the digitizer pen and graphics 
tablet. You can use the digitizer pen as a pointing device or to draw or write on the 
pressure-sensitive surface of the graphics tablet. Your handwriting or drawing is digi- 
tized by the computer, accepted as input, displayed on its video screen, and entered 
into your application. 


Speech recognition is gaining popularity in the corporate world among nontypists, people 
with disabilities, and business travelers, and is most frequently used for dictation, screen 
navigation, and Web browsing. 


Speech recognition may be the future of data entry and certainly promises to be 
the easiest method for word processing, application navigation, and conversational 
computing because speech is the easiest, most natural means of human communica- 
tion. Speech input has now become technologically and economically feasible for a 
variety of applications. Early speech recognition products used discrete speech recognition, 
where you had to pause between each spoken word. New continuous speech recognition 
software recognizes continuous, conversationally paced speech. See Figure 3.17. 

Speech recognition systems digitize, analyze, and classify your speech and its sound 
patterns. The software compares your speech patterns to a database of sound patterns 
in its vocabulary and passes recognized words to your application software. Typically, 
speech recognition systems require training the computer to recognize your voice and 
its unique sound patterns to achieve a high degree of accuracy. Training such systems 
involves repeating a variety of words and phrases in a training session, as well as using 
the system extensively. 
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FIGURE 3.17 

Using speech recognition 
technology for word 
processing. 


Source: © Tim Pennell/Corbis. 


Continuous speech recognition software products like Dragon NaturallySpeaking 
and ViaVoice by IBM have up to 300,000-word vocabularies. Training to 95 percent 
accuracy may take several hours. Longer use, faster processors, and more memory 
make 99 percent accuracy possible. In addition, Microsoft Office Suite 2007 has 
built-in speech recognition for dictation and voice commands of a variety of software 
processes. 

Speech recognition devices in work situations allow operators to perform data en- 
try without using their hands to key in data or instructions and to provide faster and 
more accurate input. For example, manufacturers use speech recognition systems for 
the inspection, inventory, and quality control of a variety of products; airlines and 
parcel delivery companies use them for voice-directed sorting of baggage and parcels. 
Speech recognition can also help you operate your computer’s operating systems and 
software packages through voice input of data and commands. For example, such soft- 
ware can be voice-enabled so you can send e-mail and surf the World Wide Web. 

Speaker-independent voice recognition systems, which allow a computer to under- 
stand a few words from a voice it has never heard before, are being built into products 
and used in a growing number of applications. Examples include voice-messaging com- 
puters, which use speech recognition and voice response software to guide an end user 
verbally through the steps of a task in many kinds of activities. Typically, they enable 
computers to respond to verbal and ‘Touch-Tone input over the telephone. Examples 
of applications include computerized telephone call switching, telemarketing surveys, 
bank pay-by-phone bill-paying services, stock quotation services, university registra- 
tion systems, and customer credit and account balance inquiries. 

One of the newest examples of this technology is Ford SYNC. SYNC is a factory- 
installed, in-car communications and entertainment system jointly developed by Ford 
Motor Company and Microsoft. The system was offered on 12 different Ford, Lincoln, 
and Mercury vehicles in North America for the 2008 model year and is available on 
most 2009 Ford offerings. 


Optical Scanning 


FIGURE 3.18 


A modern document 
management system 
can serve as an optical 
scanner, copier, 
fax, and printer. 
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Ford SYNC allows a driver to bring almost any mobile phone or digital media 
player into a vehicle and operate it using voice commands, the vehicle’s steering wheel, 
or manual radio controls. The system can even receive text messages and read them 
aloud using a digitized female voice named “Samantha.” SYNC can interpret a hun- 
dred or so shorthand messages, such as LOL for “laughing out loud,” and it will read 
swear words; it won’t, however, decipher obscene acronyms. Speech recognition is 
now common in your car, home, and workplace. 


Few people understand how much scanners can improve a computer system and make 
your work easier. Their function is to get documents into your computer with a minimum 
of time and hassle, transforming just about anything on paper—a letter, a logo, or a 
photograph—into the digital format that your PC can read. Scanners can be a big help 
in getting loads of paper off your desk and into your PC. 


Optical scanning devices read text or graphics and convert them into digital input 
for your computer. Thus, optical scanning enables the direct entry of data from source 
documents into a computer system. For example, you can use a compact desktop scan- 
ner to scan pages of text and graphics into your computer for desktop publishing and 
Web publishing applications. You can scan documents of all kinds into your system 
and organize them into folders as part of a document management library system for 
easy reference or retrieval. See Figure 3.18. 

There are many types of optical scanners, but all employ photoelectric devices to 
scan the characters being read. Reflected light patterns of the data are converted into 
electronic impulses that are then accepted as input to the computer system. Compact 
desktop scanners have become very popular due to their low cost and ease of use with 
personal computer systems. However, larger, more expensive flatbed scanners are faster 
and provide higher-resolution color scanning. 


Source: Courtesy of Xerox. 
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FIGURE 3.19 


Using an optical scanning 
wand to read bar coding of 
inventory data. 


CSK Auto Replaces 
Paper Forms with 
Digital Data 


Source: © Jeff Smith/The Image Bank/Getty Images. 


Another optical scanning technology is called optical character recognition 
(OCR). The OCR scanners can read the characters and codes on merchandise tags, 
product labels, credit card receipts, utility bills, insurance premiums, airline tickets, 
and other documents. In addition, OCR scanners are used to automatically sort mail, 
score tests, and process a wide variety of forms in business and government. 

Devices such as handheld optical scanning wands are frequently used to read bar 
codes, codes that use bars to represent characters. One common example is the Uni- 
versal Product Code (UPC) bar coding that you see on just about every product sold. 
For example, the automated checkout scanners found in supermarkets read UPC bar 
coding. Supermarket scanners emit laser beams that are reflected off a code. The re- 
flected image is converted to electronic impulses that are sent to the in-store compu- 
ter, where they are matched with pricing information. Pricing information is returned 
to the terminal, visually displayed, and printed on a receipt for the customer. See 
Figure 3.19. 


CSK Auto Corp. is reaping the benefits of a new proof-of-delivery system it de- 
ployed in 2005 to help the $1.6 billion automotive-parts retailer boost its perform- 
ance. CSK Auto owns more than 1,100 retail outlets in 22 states that operate under 
the names Checker Auto Parts, Schuck’s Auto Supply, and Kragen Auto Parts stores, 
as well as a wholesale business. CSK Auto, which carries almost 20,000 automotive 
products, was printing hundreds of thousands of multipart forms as drivers delivered 
auto parts to their wholesale customers. The forms needed to be stored at several 
locations and sometimes would get misplaced, resulting in costly overhead. 

To solve the problem, the company developed and deployed a proof-of-delivery 
application that runs on an HHP Dolphin 2D handheld computer, which includes an 
integrated digital camera. When a driver completes a delivery, the receipt informa- 
tion is electronically captured from a bar code, and the driver takes a digital snapshot 
of the signature at the time of delivery. When drivers return to their offices and dock 
the handheld units, the data are transmitted to a store server. Customers can view 
delivery information on CSK Auto’s secure Web site. 


Other Input 
Technologies 


Output 
Technologies 
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CSK Auto invested about $1 million into the proof-of-delivery system, but it 
expects big returns, as it was spending about $500,000 annually on the paper-based 
system. “One of the interesting and unexpected benefits of the system is that the 
accounts-payable departments at our larger companies now pay us more quickly 
because the information is more readily available to them,” says Larry Buresh, senior 
VP and CIO. 


Source: Adapted from George Hulme, “CSK Auto Replaces Paper Forms with Digital Data,” Information Week, 
April 26, 2005. 


Magnetic stripe technology is a familiar form of data entry that helps computers read 
credit cards. The coating of the magnetic stripe on the back of such cards can hold 
about 200 bytes of information. Customer account numbers can be recorded on the 
magnetic stripe so that it can be read by bank ATMs, credit card authorization termi- 
nals, and many other types of magnetic stripe readers. 

Smart cards that embed a microprocessor chip and several kilobytes of memory 
into debit, credit, and other cards are popular in Europe and becoming available in the 
United States. One example is in the Netherlands, where millions of smart debit cards 
have been issued by Dutch banks. Smart debit cards enable you to store a cash balance 
on the card and electronically transfer some of it to others to pay for small items and 
services. The balance on the card can be replenished in ATMs or other terminals. The 
smart debit cards used in the Netherlands feature a microprocessor and either 8 or 
16 kilobytes of memory, plus the usual magnetic stripe. The smart cards are widely 
used to make payments in parking meters, vending machines, newsstands, pay 
telephones, and retail stores. 

Digital cameras represent another fast-growing set of input technologies. Digital 
still cameras and digital video cameras (digital camcorders) enable you to shoot, store, 
and download still photos or full-motion video with audio into your PC. Then you 
can use image-editing software to edit and enhance the digitized images and include 
them in newsletters, reports, multimedia presentations, and Web pages. Today’s typical 
mobile phone includes digital camera capabilities as well. 

The computer systems of the banking industry can magnetically read checks and 
deposit slips using magnetic ink character recognition (MICR) technology. Com- 
puters can thus sort and post checks to the proper checking accounts. Such processing 
is possible because the identification numbers of the bank and the customer’s account 
are preprinted on the bottom of the checks with an iron oxide—based ink. The first 
bank receiving a check after it has been written must encode the amount of the check 
in magnetic ink on the check’s lower-right corner. The MICR system uses 14 charac- 
ters (the 10 decimal digits and 4 special symbols) of a standardized design. Reader- 
sorter equipment reads a check by first magnetizing the magnetic ink characters and 
then sensing the signal induced by each character as it passes a reading head. In this 
way, data are electronically captured by the bank’s computer systems. 


Computers provide information in a variety of forms. Video displays and printed doc- 
uments have been, and still are, the most common forms of output from computer 
systems. Yet other natural and attractive output technologies such as voice response 
systems and multimedia output are increasingly found along with video displays in 
business applications. 

For example, you have probably experienced the voice and audio output generated 
by speech and audio microprocessors in a variety of consumer products. Voice messag- 
ing software enables PCs and servers in voice mail and messaging systems to interact 
with you through voice responses. Of course, multimedia output is common on the 
Web sites of the Internet and corporate intranets. 
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FIGURE 3.20 


The flat-panel LCD video 
monitor is becoming the de 
facto standard for a desktop 


PC system. 


Video Output 


Printed Output 


Source: Courtesy of Hewlett-Packard. 


Video displays are the most common type of computer output. Many desktop comput- 
ers still rely on video monitors that use a cathode ray tube (CRT) technology similar to 
the picture tubes used in home television sets. Usually, the clarity of the video display 
depends on the type of video monitor you use and the graphics circuit board installed 
in your computer. These can provide a variety of graphics modes of increasing capa- 
bility. A high-resolution, flicker-free monitor is especially important if you spend a lot 
of time viewing multimedia on CDs, or on the Web, or the complex graphical displays 
of many software packages. 

The biggest use of liquid crystal displays (LCDs) has been to provide a visual 
display capability for portable microcomputers and PDAs. However, the use of “flat 
panel” LCD video monitors for desktop PC systems has become common as their 
cost becomes more affordable. See Figure 3.20. These LCD displays need signifi- 
cantly less electric current and provide a thin, flat display. Advances in technology 
such as active matrix and dual scan capabilities have improved the color and clarity 
of LCD displays. In addition, high-clarity flat panel televisions and monitors using 
plasma display technologies are becoming popular for large-screen (42- to 80-inch) 
viewing. 


Printing information on paper is still the most common form of output after video 
displays. Thus, most personal computer systems rely on an inkjet or laser printer to 
produce permanent (hard-copy) output in high-quality printed form. Printed output 
is still acommon form of business communications and is frequently required for legal 
documentation. Computers can produce printed reports and correspondence, docu- 
ments such as sales invoices, payroll checks, bank statements, and printed versions of 
graphic displays. See Figure 3.21. 

Inkjet printers, which spray ink onto a page, have become the most popular, low- 
cost printers for microcomputer systems. They are quiet, produce several pages per 
minute of high-quality output, and can print both black-and-white and high-quality 
color graphics. Laser printers use an electrostatic process similar to a photocopying 
machine to produce many pages per minute of high-quality black-and-white output. 


FIGURE 3.21 


Modern laser printers 
produce high-quality color 
output with high speed. 


Storage 
Trade-Offs 


FIGURE 3.22 


Storage media cost, speed, 
and capacity trade-offs. 
Note how cost increases 
with faster access speeds but 
decreases with the increased 
capacity of storage media. 
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Source: Courtesy of Xerox. 


More expensive color laser printers and multifunction inkjet and laser models that 
print, fax, scan, and copy are other popular choices for business offices. 


Data and information must be stored until needed using a variety of storage methods. 
For example, many people and organizations still rely on paper documents stored in 
filing cabinets as a major form of storage media. However, you and other computer 
users are more likely to depend on the memory circuits and secondary storage devices 
of computer systems to meet your storage requirements. Progress in very-large-scale 
integration (VLSI), which packs millions of memory circuit elements on tiny semicon- 
ductor memory chips, is responsible for continuing increases in the main-memory 
capacity of computers. Secondary storage capacities are also escalating into the bil- 
lions and trillions of characters, due to advances in magnetic and optical media. 

There are many types of storage media and devices. Figure 3.22 illustrates the 
speed, capacity, and cost relationships of several alternative primary and secondary 
storage media. Note the cost/speed/capacity trade-offs as you move from semiconduc- 
tor memories to magnetic disks to optical disks and to magnetic tape. High-speed 
storage media cost more per byte and provide lower capacities. Large-capacity storage 
media cost less per byte but are slower. These trade-offs are why we have different 
kinds of storage media. 


Primary Storage 


Secondary Storage 
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Computer Storage 
Fundamentals 


FIGURE 3.23 
Examples of the ASCII 
computer code that 
computers use to represent 
numbers and the letters of 
the alphabet. 


However, all storage media, especially memory chips and magnetic disks, continue 
to increase in speed and capacity and decrease in cost. Developments like automated 
high-speed cartridge assemblies have given faster access times to magnetic tape, and 
the speed of optical disk drives continues to increase. 

Note in Figure 3.22 that semiconductor memories are used mainly for primary 
storage, although they are sometimes used as high-speed secondary storage devices. 
Magnetic disk and tape and optical disk devices, in contrast, are used as secondary 
storage devices to enlarge the storage capacity of computer systems. Also, because 
most primary storage circuits use RAM (random-access memory) chips, which lose 
their contents when electrical power is interrupted, secondary storage devices provide 
a more permanent type of storage media. 


Data are processed and stored in a computer system through the presence or absence 
of electronic or magnetic signals in the computer’s circuitry or in the media it uses. 
This character is called “two-state” or binary representation of data because the com- 
puter and the media can exhibit only two possible states or conditions, similar to a 
common light switch: “on” or “off.” For example, transistors and other semiconductor 
circuits are in either a conducting or a nonconducting state. Media such as magnetic 
disks and tapes indicate these two states by having magnetized spots whose magnetic 
fields have one of two different directions, or polarities. This binary characteristic of 
computer circuitry and media is what makes the binary number system the basis for 
representing data in computers. Thus, for electronic circuits, the conducting (“on”) 
state represents the number 1, whereas the nonconducting (“off”) state represents the 
number 0. For magnetic media, the magnetic field of a magnetized spot in one direc- 
tion represents a 1, while magnetism in the other direction represents a 0. 

The smallest element of data is called a bit, short for binary digit, which can have 
a value of either 0 or 1. The capacity of memory chips is usually expressed in terms of 
bits. A byte is a basic grouping of bits that the computer operates as a single unit. 
‘Typically, it consists of eight bits and represents one character of data in most com- 
puter coding schemes. Thus, the capacity of a computer’s memory and secondary 
storage devices is usually expressed in terms of bytes. Computer codes such as ASCII 
(American Standard Code for Information Interchange) use various arrangements of 
bits to form bytes that represent the numbers 0 through 9, the letters of the alphabet, 
and many other characters. See Figure 3.23. 


Character ASCII Code Character ASCII Code Character ASCII Code 


0 00110000 A 01000001 N 01001110 
1 00110001 B 01000010 O 01001111 
2? 00110010 © 01000011 P 01010000 
3 00110011 D 01000100 Q 01010001 
4 00110100 E 01000101 R 01010010 
5 00110101 F 01000110 S 01010011 
6 00110110 G 01000111 T 01010100 
7 00110111 H 01001000 U 01010101 
8 00111000 I 01001001 V 01010110 
9 00111001 J 01001010 W 01010111 

K 01001011 X 01011000 

IL, 01001100 X 01011001 

M 01001101 Z 01011010 


FIGURE 3.24 


Computers use the binary 
system to store and 
compute numbers. 


Direct and 
Sequential Access 
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128 64 By 16 8 4 2 1 


0 or 1 oori 0 or 1 0 or 1 Oorl 0 or 1 0 or 1 Oorl 


To represent any decimal number using the binary system, each place is simply assigned a 
value of either 0 or 1. To convert binary to decimal, simply add up the value of each place. 


Example: 
1 0 0 1 1 0 0 1 
128 0 0 16 8 0 0 1 
WS a © ss @ = WG + 8 + O + @ + il = 153 


10011001 = 153 


Since childhood, we have learned to do our computations using the numbers 0 
through 9, the digits of the decimal number system. Although it is fine for us to use 
10 digits for our computations, computers do not have this luxury. Every computer proc- 
essor is made of millions of tiny switches that can be turned off or on. Because these 
switches have only two states, it makes sense for a computer to perform its computa- 
tions with a number system that has only two digits: the binary number system. These 
digits (0 and 1) correspond to the off/on positions of the switches in the computer 
processor. With only these two digits, a computer can perform all the arithmetic that 
we can with 10 digits. Figure 3.24 illustrates the basic concepts of the binary system. 

The binary system is built on an understanding of exponentiation (raising a number 
to a power). In contrast to the more familiar decimal system, in which each place rep- 
resents the number 10 raised to a power (ones, tens, hundreds, thousands, and so on), 
each place in the binary system represents the number 2 raised to successive powers 
(2°, 21, 27, and so on). As shown in Figure 3.24, the binary system can be used to ex- 
press any integer number by using only 0 and 1. 

Storage capacities are frequently measured in kilobytes (KB), megabytes (MB), 
gigabytes (GB), or terabytes (TB). Although kilo means 1,000 in the metric system, 
the computer industry uses K to represent 1,024 (or 2!°) storage positions. For exam- 
ple, a capacity of 10 megabytes is really 10,485,760 storage positions, rather than 10 
million positions. However, such differences are frequently disregarded to simplify 
descriptions of storage capacity. Thus, a megabyte is roughly 1 million bytes of stor- 
age, a gigabyte is roughly 1 billion bytes, and a terabyte represents about 1 trillion 
bytes, while a petabyte is more than 1 quadrillion bytes. 

‘To put these storage capacities in perspective, consider the following: A terabyte is 
equivalent to approximately 20 million typed pages, and it has been estimated that the 
total size of all the books, photographs, video and sound recordings, and maps in the 
U.S. Library of Congress approximates 3 petabytes (3,000 terabytes). 


Primary storage media such as semiconductor memory chips are called direct access 
memory or random-access memory (RAM). Magnetic disk devices are frequently 
called direct access storage devices (DASDs). In contrast, media such as magnetic tape 
cartridges are known as sequential access devices. 

The terms direct access and random access describe the same concept. They mean 
that an element of data or instructions (such as a byte or word) can be directly stored 
and retrieved by selecting and using any of the locations on the storage media. They 
also mean that each storage position (1) has a unique address and (2) can be individu- 
ally accessed in approximately the same length of time without having to search 
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FIGURE 3.25 Sequential versus direct access storage. Magnetic tape is a typical sequential access 
medium. Magnetic disks are typical direct access storage devices. 


Sequential Access Storage Device Direct Access Storage Device 


Read/Write Head 


Semiconductor 
Memory 


Read/Write 
Head 


through other storage positions. For example, each memory cell on a microelectronic 
semiconductor RAM chip can be individually sensed or changed in the same length 
of time. Also, any data record stored on a magnetic or optical disk can be accessed 
directly in approximately the same period. See Figure 3.25. 

Sequential access storage media such as magnetic tape do not have unique storage 
addresses that can be directly addressed. Instead, data must be stored and retrieved 
using a sequential or serial process. Data are recorded one after another in a prede- 
termined sequence (e.g., numeric order) on a storage medium. Locating an individu- 
al item of data requires searching the recorded data on the tape until the desired item 
is located. 


Memory is the coalman to the CPU's locomotive: For maximum PC performance, it 
must keep the processor constantly stoked with instructions. Faster CPUs call for larger 
and faster memories, both in the cache where data and instructions are stored temporarily 
and in the main memory. 


The primary storage (main memory) of your computer consists of microelectronic 
semiconductor memory chips. It provides you with the working storage your computer 
needs to process your applications. Plug-in memory circuit boards containing 256 meg- 
abytes or more of memory chips can be added to your PC to increase its memory 
capacity. Specialized memory can help improve your computer’s performance. Exam- 
ples include external cache memory of 512 kilobytes to help your microprocessor work 
faster or a video graphics accelerator card with 64 megabytes or more of RAM for 
faster and clearer video performance. Removable credit-card-size and smaller “flash 
memory” RAM devices like a jump drive or a memory stick can also provide hundreds 
of megabytes of erasable direct access storage for PCs, PDAs, or digital cameras. 

Some of the major attractions of semiconductor memory are its small size, great 
speed, and shock and temperature resistance. One major disadvantage of most semi- 
conductor memory is its volatility. Uninterrupted electric power must be supplied, or 
the contents of memory will be lost. Therefore, either emergency transfer to other 
devices or standby electrical power (through battery packs or emergency generators) 
is required if data are to be saved. Another alternative is to permanently “burn in” the 
contents of semiconductor devices so that they cannot be erased by a loss of power. 

Thus, there are two basic types of semiconductor memory: random-access mem- 
ory (RAM) and read-only memory (ROM). 


e RAM, random-access memory. These memory chips are the most widely used 
primary storage medium. Each memory position can be both sensed (read) and 
changed (written), so it is also called read/write memory. This is a volatile memory. 


FIGURE 3.26 
A USB flash memory drive. 


JumpDrives 


w 


Source: Courtesy of Lexar 
Media. 


Nanochip Inc.: 
New Memory 
Process May 
Overcome 
Traditional Barriers 


Chapter 3 / Computer Hardware @ 107 


e ROM, read-only memory. Nonvolatile random-access memory chips are 
used for permanent storage; ROM can be read but not erased or overwritten. 
Frequently used control instructions in the control unit and programs in primary 
storage (such as parts of the operating system) can be permanently burned into 
the storage cells during manufacture, sometimes called firmware. Variations 
include PROM (programmable read-only memory) and EPROM (erasable 
programmable read-only memory), which can be permanently or temporarily 
programmed after manufacture. 


One of the newest and most innovative forms of storage that uses semiconductor 
memory is the flash drive (sometimes referred to as a JumpDrive). Figure 3.26 shows a 
common flash memory drive. 

Flash memory uses a small chip containing thousands of transistors that can 
be programmed to store data for virtually unlimited periods without power. The 
small drives can be easily transported in your pocket and are highly durable. Storage 
capacities currently range as high as 20 gigabytes, but newer flash technologies 
are making even higher storage capacities a reality. The advent of credit-card-like 
memory cards and ever-smaller storage technologies puts more data into the user’s 
pocket every day. 


A new kind of flash memory technology with potentially greater capacity and dura- 
bility, lower power requirements, and the same design as flash memory is primed 
to challenge today’s solid-state disk products. Nanochip Inc., based in Fremont, 
California, said it has made breakthroughs in its array-based memory research that 
will enable it to deliver working prototypes to potential manufacturing partners 
by 2009. 

Current thinking is that flash memory could hit its limit at around 32-45 nano- 
meters. That describes the smallest possible width of a metal line on the circuit or the 
amount of space between that line and the next line. The capacity of an integrated 
circuit is restricted by the ability to print to a smaller and smaller two-dimensional 
plane, otherwise known as the lithography. That’s exactly where Nanochip’s technol- 
ogy shines. 

“Every two years, you need to buy this new machine that allows you to print 
something that’s smaller and finer,” says Stefan Lai of Nanochip. Array-based 
memory uses a grid of microscopic probes to read and write to a storage material. 
The storage area isn’t defined by the lithography but by the movement of the 
probes. “If Nanochip can move the probes one-tenth the distance, for example, 
they can get 100 times the density with no change in the lithography,” says Lai. 
“You don’t have to buy all these new machines.” IBM has been working on a simi- 
lar technology for years. 

Lai believes that the new memory could herald breakthroughs in mobile devices 
and biotechnology. “You now need your whole life history stored in your mobile 
device,” he says. “If you want something to store your genome in, it may take a lot 
of memory, and you'll want to carry it with you.” The big question that remains 
for Nanochip is whether the company can create working prototypes with the cost 
advantages that array-based technology is supposed to offer over conventional forms 
of memory. 

The challenge for adoption of any new type of memory is that flash itself isn’t 
standing still. “In 2010, it’s going to be $1 per gigabyte . . . so hopefully the cost per 
gigabyte [of probe-based arrays] is going to be low.” 


Source: Adapted from Dian Schaffhauser, “A Storage Technology That Breaks Moore’s Law,” Computerworld, 
March 19, 2008. 
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Magnetic 
Disks 


Types of Magnetic 
Disks 


Multigigabyte magnetic disk drives aren’t extravagant, considering that full-motion 
video files, sound tracks, and photo-quality images can consume colossal amounts of disk 
space in a blink. 


Magnetic disks are the most common form of secondary storage for your compu- 
ter system. That’s because they provide fast access and high storage capacities at a 
reasonable cost. Magnetic disk drives contain metal disks that are coated on both 
sides with an iron oxide recording material. Several disks are mounted together on a 
vertical shaft, which typically rotates the disks at speeds of 3,600 to 7,600 revolu- 
tions per minute (rpm). Electromagnetic read/write heads are positioned by access 
arms between the slightly separated disks to read and write data on concentric, 
circular tracks. Data are recorded on tracks in the form of tiny magnetized spots to 
form the binary digits of common computer codes. Thousands of bytes can be re- 
corded on each track, and there are several hundred data tracks on each disk surface, 
thus providing you with billions of storage positions for your software and data. See 
Figure 3.27. 


There are several types of magnetic disk arrangements, including removable disk car- 
tridges as well as fixed disk units. Removable disk devices are popular because they are 
transportable and can be used to store backup copies of your data off-line for conven- 
ience and security. 


e Floppy disks, or magnetic diskettes, consist of polyester film disks covered with 
an iron oxide compound. A single disk is mounted and rotates freely inside a 
protective flexible or hard plastic jacket, which has access openings to accommo- 
date the read/write head of a disk drive unit. The 3¥%-inch floppy disk, with ca- 
pacities of 1.44 megabytes, was the most widely used version, with a Superdisk 
technology offering 120 megabytes of storage. Zip drives use a floppy-like 
technology to provide up to 750 MB of portable disk storage. ‘Today’s computers 
have all but eliminated inclusion of a drive to read floppy disks, but they can be 
found if necessary. 


FIGURE 3.27 Magnetic disk media: a hard magnetic disk drive and a 32-inch floppy disk. 


Source: © Stockbyte/PunchStock. 


Source: © Royalty Free/Corbis. 
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e Hard disk drives combine magnetic disks, access arms, and read/write heads into a 
sealed module. This combination allows higher speeds, greater data recording 
densities, and closer tolerances within a sealed, more stable environment. Fixed 
or removable disk cartridge versions are available. Capacities of hard drives range 
from several hundred megabytes to hundreds of gigabytes of storage. 


RAID computer storage equipment—hig, refrigerator-size boxes full of dozens of inter- 
linked magnetic disk drives that can store the equivalent of 100 million tax returns— 
hardly gets the blood rushing. But it should. Fust as speedy and reliable networking 
opened the floodgates to cyberspace and e-commerce, ever-more-turbocharged data storage 
is a key building block of the Internet. 


Disk arrays of interconnected microcomputer hard disk drives have replaced 
large-capacity mainframe disk drives to provide virtually unlimited online storage. 
Known as RAID (redundant arrays of independent disks), they combine from 6 to 
more than 100 small hard disk drives and their control microprocessors into a single 
unit. These RAID units provide large capacities (as high as 1-2 terabytes or more) 
with high access speeds because data are accessed in parallel over multiple paths from 
many disks. Also, RAID units provide a fault-tolerant capacity, in that their redundant 
design offers multiple copies of data on several disks. If one disk fails, data can be 
recovered from backup copies automatically stored on other disks. Storage area net- 
works (SANs) are high-speed fiber channel local area networks that can interconnect 
many RAID units and thus share their combined capacity through network servers 
with many users. 

There are a variety of classifications of RAID, and newer implementations include 
not only hardware versions, but also software methods. The technical aspects of RAID 
are beyond the scope of this text and probably beyond the needs of the modern busi- 
ness technologist as well. It is sufficient to note that the storage mechanisms in the 
modern organization are probably using some type of RAID technology. If you are 
interested in drilling deeper into this technology and how it works, a wide variety of 
Internet resources are available. 


Tape storage is moving beyond backup. Although disk subsystems provide the fastest 
response time for mission-critical data, the sheer amount of data that users need to 

access these days as part of huge enterprise applications, such as data warehouses, requires 
affordable [magnetic tape] storage. 


Magnetic tape is still being used as a secondary storage medium in business appli- 
cations. The read/write heads of magnetic tape drives record data in the form of mag- 
netized spots on the iron oxide coating of the plastic tape. Magnetic tape devices 
include tape reels and cartridges in mainframes and midrange systems and small 
cassettes or cartridges for PCs. Magnetic tape cartridges have replaced tape reels in 
many applications and can hold more than 200 megabytes. 

One growing business application of magnetic tape involves the use of high- 
speed 36-track magnetic tape cartridges in robotic automated drive assemblies that 
can directly access hundreds of cartridges. ‘These devices provide lower-cost storage to 
supplement magnetic disks to meet massive data warehouse and other online business 
storage requirements. Other major applications for magnetic tape include long-term 
archival storage and backup storage for PCs and other systems. 


Optical disk technology has become a necessity. Most software companies now distribute 
their elephantine programs on CD-ROMs. Many corporations are now rolling their own 
CDs to distribute product and corporate information that once filled bookshelves. 


Optical disks, a fast-growing type of storage media, use several major alternative tech- 
nologies. See Figure 3.28. One version is called CD-ROM (compact disk—read-only 
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FIGURE 3.28 
Comparing the capabilities 
of optical disk drives. 


Optical Disk Drive Capabilities 


e CD-ROM 
A CD-ROM drive provides a low-cost way to read data files and load software onto 
your computer, as well as play music CDs. 


e CD-RW 
A CD-RW drive allows you to easily create your own custom data CDs for data backup 
or data transfer purposes. It will also allow you to store and share video files, large data 
files, digital photos, and other large files with other people that have access to a CD-ROM 
drive. This drive will also do anything your CD-ROM drive will do. It reads all your 
existing CD-ROMs, Audio CDs, and CDs that you have created with your CD burner. 


e CD-RW/DVD 
A CD-RW/DVD combination drive brings all the advantages of CD-RW, CD-ROM, 
and DVD-ROM to a single drive. With a CD-RW/DVD combo drive, you can read 
DVD-ROM disks, read CD-ROM disks, and create your own custom CDs. 


e DVD-ROM 
A DVD-ROM drive allows you to enjoy the crystal-clear color, picture, and sound clar- 
ity of DVD video on your PC. It will also prepare you for future software and large data 
files that will be released on DVD-ROM. A DVD-ROM drive can also read CD-ROM 
disks, effectively providing users with full optical read capability in one device. 


e DVD+RW/+R with CD-RW 
A DVD+RW/-+R with CD-RW drive is a great all-in-one drive, allowing you to burn 
DVD+RW or DVD+R disks, burn CDs, and read DVDs and CDs. It enables you to 
create DVDs to back up and archive up to 4.7GB of data files (that’s up to 7 times the 
capacity of a standard 650MB CD) and store up to to 2 hours of MPEG2 digital video. 


Source: Adapted from “Learn More—Optical Drives,” www.dell.com. 


memory). CD-ROM technology uses 12-centimeter (4.7-inch) compact disks (CDs) 
similar to those used in stereo music systems. Each disk can store more than 600 mega- 
bytes. That’s the equivalent of more than 400 1.44-megabyte floppy disks or more than 
300,000 double-spaced pages of text. A laser records data by burning permanent micro- 
scopic pits in a spiral track on a master disk from which compact disks can be mass pro- 
duced. Then CD-ROM disk drives use a laser device to read the binary codes formed by 
those pits. 

CD-R (compact disk—-recordable) is another popular optical disk technology. 
CD-R drives or CD burners are commonly used to record data permanently on 
CDs. The major limitation of CD-ROM and CD-R disks is that recorded data can- 
not be erased. However, CD-RW (CD-rewritable) drives record and erase data by 
using a laser to heat a microscopic point on the disk’s surface. In CD-RW versions 
using magneto-optical technology, a magnetic coil changes the spot’s reflective 
properties from one direction to another, thus recording a binary 1 or 0. A laser 
device can then read the binary codes on the disk by sensing the direction of re- 
flected light. 

DVD technologies have dramatically increased optical disk capacities and capa- 
bilities. DVD (digital video disk or digital versatile disk) optical disks can hold from 
3.0 to 8.5 gigabytes of multimedia data on each side. The large capacities and high- 
quality images and sound of DVD technology are expected to replace CD tech- 
nologies for data storage and promise to accelerate the use of DVD drives for 
multimedia products that can be used in both computers and home entertainment 
systems. Thus, DVD-ROM disks are increasingly replacing magnetic tape video- 
cassettes for movies and other multimedia products, while DVD+RW disks are 
being used for backup and archival storage of large data and multimedia files. See 
Figure 3.29. 


FIGURE 3.29 
Optical disk storage 
includes CD and DVD 
technologies. 
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Source: Photodisc/Getty Images. 


One of the major uses of optical disks in mainframe and midrange systems is in image 
processing, where long-term archival storage of historical files of document images 
must be maintained. Financial institutions, among others, are using optical scanners to 
capture digitized document images and store them on optical disks as an alternative to 
microfilm media. 

One of the major business uses of CD-ROM disks for personal computers is to 
provide a publishing medium for fast access to reference materials in a convenient, 
compact form. This material includes catalogs, directories, manuals, periodical 
abstracts, part listings, and statistical databases of business and economic activity. 
Interactive multimedia applications in business, education, and entertainment are 
another major use of optical disks. The large storage capacities of CD and DVD disks 
are a natural choice for computer video games, educational videos, multimedia ency- 
clopedias, and advertising presentations. 


One of the newest and most rapidly growing storage technologies is radio frequency 
identification (RFID), a system for tagging and identifying mobile objects such as store 
merchandise, postal packages, and sometimes even living organisms (like pets). Using 
a special device called an RFID reader, RFID allows objects to be labeled and tracked 
as they move from place to place. 

The RFID technology works using small (sometimes smaller than a grain of sand) 
pieces of hardware called RFID chips. These chips feature an antenna to transmit and 
receive radio signals. Currently, there are two general types of RFID chips: passive and 
active. Passive RFID chips do not have a power source and must derive their power 
from the signal sent from the reader. Active RFID chips are self-powered and do not 
need to be close to the reader to transmit their signal. Any RFID chips may be at- 
tached to objects or, in the case of some passive RFID systems, injected into objects. A 
recent use for RFID chips is the identification of pets such as dogs or cats. By having 
a tiny RFID chip injected just under their skin, they can be easily identified if they 
become lost. The RFID chip contains contact information about the owner of the pet. 
‘Taking this a step further, the Transportation Security Administration is considering 
using RFID tags embedded in airline boarding passes to keep track of passengers. 

Whenever a reader within range sends appropriate signals to an object, the associated 
RFID chip responds with the requested information, such as an identification number or 
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RFID Privacy Issues 


product date. The reader, in turn, displays the response data to an operator. Readers may 
also forward data to a networked central computer system. Such RFID systems generally 
support storing information on the chips as well as simply reading data. 

The RFID systems were created as an alternative to common bar codes. Relative 
to bar codes, RFID allows objects to be scanned from a greater distance, supports 
storing of data, and allows more information to be tracked per object. 

Recently (as discussed in the next section), RFID has raised some privacy concerns 
as a result of the invisible nature of the system and its capability to transmit fairly so- 
phisticated messages. As these types of issues are resolved, we can expect to see RFID 
technology used in just about every way imaginable. 


How would you like it if, for instance, one day you realized your underwear was reporting on 
your whereabouts?—California State Senator Debra Bowen, at a 2003 hearing on RFID privacy 
concerns. 

The use of RFID technology has caused considerable controversy and even prod- 
uct boycotts by consumer privacy advocates who refer to RFID tags as spychips. The 
two main privacy concerns regarding RFID are: 


e Since the owner of an item will not necessarily be aware of the presence of an RFID 
tag, and the tag can be read at a distance without the knowledge of the individual, it 
becomes possible to gather sensitive data about an individual without consent. 


e Ifa customer pays for a tagged item by credit card or in conjunction with a loy- 
alty card, then it would be possible to deduce the identity of the purchaser indi- 
rectly by reading the globally unique ID of that item (contained in the RFID tag). 


Most concerns revolve around the fact that RFID tags affixed to products remain 
functional even after the products have been purchased and taken home; thus, they 
can be used for surveillance and other purposes unrelated to their supply chain inven- 
tory functions. 

Read range, however, is a function of both the reader and the tag itself. Improvements 
in technology may increase read ranges for tags. Having readers very close to the tags 
makes short-range tags readable. Generally, the read range of a tag is limited to the dis- 
tance from the reader over which the tag can draw enough energy from the reader field to 
power the tag. Tags may be read at longer ranges by increasing reader power. The limit on 
read distance then becomes the signal-to-noise ratio of the signal reflected from the tag 
back to the reader. Researchers at two security conferences have demonstrated that passive 
UHF RFID tags (not the HF-type used in U.S. passports), normally read at ranges of up 
to 30 feet, can be read at ranges of 50-69 feet using suitable equipment. Many other types 
of tag signals can be intercepted from 30 to 35 feet away under good conditions, and the 
reader signal can be detected from miles away if there are no obstructions. 

The potential for privacy violations with RFID was demonstrated by its use in a 
pilot program by the Gillette Company, which conducted a “smart shelf” test at a 
‘Tesco in Cambridge, England. They automatically photographed shoppers taking 
RFID-tagged safety razors off the shelf to see if the technology could be used to 
deter shoplifting. This trial resulted in consumer boycott against Gillette and Tesco. 
In another incident, uncovered by the Chicago Sun-Times, shelves in a Wal-Mart in 
Broken Arrow, Oklahoma, were equipped with readers to track the Max Factor 
Lipfinity lipstick containers stacked on them. Webcam images of the shelves were 
viewed 750 miles away by Procter & Gamble researchers in Cincinnati, Ohio, who 
could tell when lipsticks were removed from the shelves and observe the shoppers 
in action. 

The controversy surrounding the use of RFID technologies was furthered by the 
accidental exposure of a proposed Auto-ID consortium public relations campaign that 
was designed to “neutralize opposition” and get consumers to “resign themselves to 
the inevitability of it” while merely pretending to address their concerns. During the 
U.N. World Summit on the Information Society (WSIS) on November 16-18, 2005, 


RFID-Enabled 
Magazines: 
Tracking Reading 
Patterns 
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Richard Stallman, founder of the free software movement, protested the use of RFID 
security cards. During the first meeting, it was agreed that future meetings would no 
longer use RFID cards; upon finding out this assurance was broken, he covered his 
card in tin foil and would uncover it only at the security stations. This protest caused 
the security personnel considerable concern. Some did not allow him to leave a con- 
ference room in which he had been the main speaker, and then prevented him from 
entering another conference room, where he was due to speak. 

The Food and Drug Administration in the United States has approved the use of 
RFID chips in humans. Some business establishments have also started to “chip” cus- 
tomers, such as the Baja Beach Nightclub in Barcelona. This has provoked concerns 
into privacy of individuals, as they can potentially be tracked wherever they go by 
an identifier unique to them. There are concerns that this could lead to abuse by an 
authoritarian government or lead to removal of other freedoms. 

In July 2006, Reuters reported that Newitz and Westhues, two hackers, showed at 
a conference in New York City that they could clone the RFID signal from a human- 
implanted RFID chip, which proved that the chip is not hack-proof as was previously 
believed. 

All of these examples share a common thread, and show that whatever can be encoded 
can also be decoded. RFID presents the potential for enormous efficiencies and cost sav- 
ings. It also presents significant challenges to privacy and security. Until these issues are 
worked through, much controversy will continue to surround RFID technologies. 


One of the most vexing problems for magazine publishers is trying to figure out just 
how many people read printed copies of magazines, rather than letting them lan- 
guish in stacks of unread mail. Other questions have been raging since the dawn of 
the printing press, such as How long and often do readers spend reading the pages? 
Do readers skip around among the articles? Do they read from front to back or from 
back to front? And does anybody look at the advertisements? Historically, these have 
been mostly unanswerable questions, left to estimates and guesswork. But a market- 
ing research company, Mediamark Research & Intelligence (MRI) is testing radio 
frequency identification (RFID) technology to measure magazine readership in pub- 
lic waiting rooms. 

‘The real-world testing follows up a year of laboratory testing. Jay Mattlin, senior 
vice president of new ventures at MRI, points out that the system needs to be tested 
“in a non-laboratory setting to determine how well it holds up in this important 
reading environment.” 

The project’s objectives are to determine whether the RFID-driven passive print 
monitoring system “can reliably measure—in a waiting room setting—the total time 
spent with a specific magazine issue, the number of individual reading occasions and 
potentially, reader exposure to individual magazine pages,” according to an MRI 
statement. 

For the lab testing, MRI created an “intelligent” magazine prototype—containing 
the passive print measuring system—that keeps track of reader activity with desig- 
nated pages. “Essentially, an RFID tag attached to the magazine sends a signal to a 
tag reader each time the test subjects turn to one of the designated magazine pages,” 
notes MRI. “The system records the times of the openings and closings of desig- 
nated pages, as well as the opening/closings of the magazine itself.” 

Mattlin reported that the system correctly identified magazine openings and 
closings an average of 95 percent of the time in internal tests. 

“We've learned a lot so far in our controlled environment,” he noted. “But con- 
sidering the complexity of trying to measure a non-electronic medium, like maga- 
zines, with electronic signals, it’s going to take a while before we have a firm grip on 
the full potential of RFID with regard to magazine audience measurement.” 
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Predictions for 
the Future 


Computers Will 
Enable People to 
Live Forever 


Of course, the most interesting thing to note about this story is the timing: How 
much value is there in solving the age-old viewership problem as print magazine 
readership continues to decline, and publishers have shifted most of their focus and 
content online? 


Source: Adapted from Thomas Wailgum, “RFID Chips in Your Magazines,” CIO Magazine, December 12, 2007. 


If Moore’s law prevails and technology advancement continues, we can expect to see 
our lives change in remarkable and unimaginable ways. Although we cannot really 
predict the future, it is interesting and fun to read the predictions of futurists—people 
whose job is to think about what the future might bring. Here’s one man’s perspective 
on what computing technology might do to change our lives in the decades to come. 


In just 15 years, we'll begin to see the merger of human and computer intelligence 
that ultimately will enable people to live forever. At least that’s the prediction of au- 
thor and futurist Ray Kurzweil. 

Kurzweil suggests that nanobots will roam our bloodstreams, fixing diseased or 
aging organs, while computers will back up our human memories and rejuvenate our 
bodies by keeping us young in appearance and health. 

The author of the book The Singularity Is Near, Kurzweil says that within a quar- 
ter of a century, nonbiological intelligence will match the range and subtlety of hu- 
man intelligence. He predicts that it will then soar past human ability because of the 
continuing acceleration of information-based technologies, as well as the ability of 
machines to share their knowledge instantly. 

Kurzweil predicts people and computers will intermix with nanobots, blood cell-sized 
robots, that will be integrated into everything from our clothing to our bodies and brains. 
People simply need to live long enough—another 15-30 years—to live forever. Think of 
it as replacing everyone’s “human body version 1.0” with nanotechnology that will repair or 
replace ailing or aging tissue, he says. Parts will become easily replaceable. 

“A $1,000 worth of computation in the 2020s will be 1,000 times more powerful 
than the human brain,” says Kurzweil, adding that in 25 years we’ll have multiplied 
our computational power by a billion. “Fifteen years from now, it’ll be a very differ- 
ent world. We’ll have cured cancer and heart disease, or at least rendered them to 
manageable chronic conditions that aren’t life threatening. We’ll get to the point 
where we can stop the aging process and stave off death.” 

Actually, we’ll hit a point where human intelligence simply can’t keep up with, or 
even follow, the progress that computers will make, according to Kurzweil. He ex- 
pects that nonbiological intelligence will have access to its own design plans and be 
able to improve itself rapidly. Computer, or nonbiological, intelligence created in the 
year 2045 will be one billion times more powerful than all human intelligence today. 

“Supercomputing is behind the progress in all of these areas,” says Kurzweil, 
adding that a prerequisite for nonbiological intelligence is to reverse-engineer biol- 
ogy and the human brain. That will give scientists a “toolkit of techniques” to apply 
when developing intelligent computers. In a written report, he said, “We won’t expe- 
rience 100 years of technological advance in the 21st century; we will witness on the 
order of 20,000 years of progress, or about 1,000 times greater than what was 
achieved in the 20th century.” 

According to Kurzweil, here’s what we can expect in the not-so-distant future: 


e Doctors will be doing a backup of our memories by the late 2030s. 


e By the late 2020s, doctors will be sending intelligent bots, or nanobots, into our 
bloodstreams to keep us healthy, and into our brains to keep us young. 
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e In 15 years, human longevity will be greatly extended. By the 2020s, we’ll be add- 
ing a year of longevity or more for every year that passes. 


e Inthe same time frame, we'll routinely be in virtual reality environments. Instead 
of making a cell call, we could “meet” someone in a virtual world and take a walk 
on a virtual beach and chat. Business meetings and conference calls will be held in 
calming or inspiring virtual locations. 


e When you're walking down the street and see someone you’ve met before, back- 
ground information about that person will pop up on your glasses or in the pe- 
riphery of your vision. 

e Instead of spending hours in front of a desktop machine, computers will be more 
ingrained in our environment. For instance, computer monitors could be re- 
placed by projections onto our retinas or on a virtual screen hovering in the air. 


e Scientists will be able to rejuvenate all of someone’s body tissues and organs by 
transforming their skin cells into youthful versions of other cell types. 


e Need a little boost? Kurzweil says scientists will be able to regrow our own cells, 
tissues, and even whole organs, and then introduce them into our bodies, all with- 
out surgery. As part of what he calls the “emerging field of rejuvenation medicine,” 
new tissue and organs will be built out of cells that have been made younger. 


e Got heart trouble? No problem, says Kurzweil. “We’ll be able to create new 
heart cells from your skin cells and introduce them into your system through the 
bloodstream. Over time, your heart cells get replaced with these new cells, and 
the result is a rejuvenated, young heart with your own DNA.” 


e One trick we’ll have to master is staying ahead of the game. Kurzweil warns that 
terrorists could obviously use this same technology against us. For example, they 
could build and spread a bioengineered biological virus that’s highly powerful 
and stealthy. 


According to Kurzweil, we’re not that far away from solving a medical problem that 
has plagued scientists and doctors for quite some time now: the common cold. He notes 
that though nanotechnology could go into our bloodstreams and knock it out, before we 
even get to that stage, biotechnology should be able to cure the cold in just 10 years. 


Source: Adapted from Sharon Gaudin, “Kurzweil: Computers Will Enable People to Live Forever,” InformationWeek, 
November 21, 2006. 


Computer Systems. Major types of computer systems 
are summarized in Figure 3.3. Microcomputers are used 
as personal computers, network computers, personal 
digital assistants, technical workstations, and informa- 
tion appliances. Midrange systems are increasingly used 
as powerful network servers and for many multiuser 
business data processing and scientific applications. 
Mainframe computers are larger and more powerful 
than most midsize systems. They are usually faster, have 
more memory capacity, and can support more network 
users and peripheral devices. They are designed to han- 
dle the information processing needs of large organiza- 
tions with high volumes of transaction processing or 
with complex computational problems. Supercomputers 
are a special category of extremely powerful mainframe 


computer systems designed for massive computational 
assignments. 


The Computer Systems Concept. A computer is 

a system of information processing components that 
perform input, processing, output, storage, and control 
functions. Its hardware components include input and 
output devices, a central processing unit (CPU), 

and primary and secondary storage devices. The ma- 
jor functions and hardware in a computer system are 
summarized in Figure 3.10. 


Peripheral Devices. Refer to Figures 3.14 and 3.22 to 
review the capabilities of peripheral devices for input, 
output, and storage discussed in this chapter. 
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Key Terms and Concepts 


These are the key terms and concepts of this chapter. The page number of their first explanation is given in parentheses. 
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10. 


11 


. Binary representation (104) 

. Central processing unit (89) 
. Computer system (88) 

. Computer terminal (81) 

. Cycles per second (90) 

. Direct access (105) 

. Graphical user interface (93) 
. Information appliance (82) 

. Magnetic disks (108) 


a. Floppy disk (108) 

b. Hard disk (109) 

c. RAID (redundant array of 
independent disks) (109) 


Magnetic stripe (101) 


. Magnetic tape (109) 
12. 
13. 
14. 
15. 


Mainframe system (85) 
Microcomputer (79) 
Midrange system (83) 
Minicomputer (84) 


16. MIPS (million instructions per 


17. 
18. 
19. 
20. 
21. 
22. 
23; 
24. 
25. 
26. 
2J: 
28. 


second) (90) 

Moore’s law (90) 
Network computer (82) 
Network server (79) 
Network terminal (81) 
Off-line (93) 

Online (93) 

Optical disks (109) 
Optical scanning (99) 
Peripherals (93) 
Pointing devices (93) 
Primary storage unit (89) 
Processing speed (90) 


a. Millisecond (90) 
b. Microsecond (90) 
c. Nanosecond (90) 
d. Picosecond (90) 


29. RFID (radio frequency 
identification) (111) 

30. Secondary storage (89) 

31. Semiconductor memory (106) 


a. RAM (random-access 
memory) (106) 

b. ROM (read-only memory) (106) 
32. Sequential access (105) 
33. Speech recognition (97) 
34. Storage capacity (105) 

a. Bit (104) 

b. Byte (104) 

c. Kilobyte (105) 

d. Megabyte (105) 

e. Gigabyte (105) 

f. Terabyte (105) 

g. Petabyte (105) 


35. Supercomputer (86) 
36. Volatility (106) 
37. Workstation computer (79) 


Review Quiz 


Match one of the previous key terms and concepts with one of the following brief examples or definitions. Try to find the best 
fit for answers that seem to fit more than one term or concept. Defend your choices. 


—— 2. The main processing component of a computer 


—— 3. Ameasure of computer speed in terms of processor 


—— 6. Magnetic disks and tape and optical disks perform 


—— 7. Input/output and secondary storage devices for a 


1. A computer is a combination of components that 


=, 


perform input, processing, output, storage, and 


control functions. 
system. 


cycles. 


this function. 


computer system. 


5. The memory of a computer. 


4. Devices for consumers to access the Internet. 


9. Separate from and not controlled by a CPU. 


—— 12. 
—___ 13. 


— 14. 


—_ 15. 


— 16. 


— 17. 
— 18. 


8. Connected to and controlled by a CPU. 


—__19. 


. Results from the presence or absence or change in 
direction of electric current, magnetic fields, or 


—___ 20. 


light rays in computer circuits and media. 


A common computer interface using a desktop 
metaphor and icons. 


Can be a desktop/laptop or handheld computer. 


A computer category between microcomputers 
and mainframes. 


A small, portable magnetic disk encased in a thin 
plastic shell. 


A large-capacity disk typically found in computer 
systems. 


Low-cost microcomputers for use with the Inter- 
net and corporate intranets. 


A redundant array of inexpensive hard drives. 


A terminal that depends on network servers for its 
software and processing power. 


A computer that manages network communica- 
tions and resources. 


The most powerful type of computer. 


—— 21. A magnetic tape technology for credit cards. 
—— 22. One-billionth of a second. 
—— 23. Roughly 1 billion characters of storage. 


—— 24. Includes electronic mice, trackballs, pointing 


sticks, and touch pads. 


—— 25. Early midrange systems used for processing- 


intensive applications such as scientific research 
and engineering analysis. 


____ 26. The largest of the three main types of computers. 


—— 27. Processor power measured in terms of number of 


instructions processed. 


____ 28. Prediction that computer power will double 


approximately every 18 to 24 months. 


____ 29. Promises to be the easiest, most natural way to 


communicate with computers. 


—— 30. Capturing data by processing light reflected from 


images. 


___ 31. The speed of a computer. 

—— 32. One one-thousandth of a second. 

____ 33. 1,024 bytes. 

—— 34. A device with a keyboard and a video display net- 


worked to a computer is a typical example. 


—— 35. The amount of data a storage device can hold. 


—— 36. A personal computer used as a technical 


workstation. 


—— 37. The smallest unit of data storage. 
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___— 38. One trillion bytes. 


—— 39. You cannot erase the contents of these storage 


circuits. 


—— 40. The memory of most computers consists of these 


storage circuits. 


——— 41. The property that determines whether data are 


lost or retained when power fails. 


____ 42. Each position of storage can be accessed in 


approximately the same time. 


—— 43. Each position of storage can be accessed according 


to a predetermined order. 


—— 44. Microelectronic storage circuits on silicon chips. 


—— 45. Uses magnetic spots on metal or plastic disks. 


—— 46. Uses magnetic spots on plastic tape. 


—— 47. Uses a laser to read microscopic points on 


plastic disks. 


—— 48. A millionth of a second. 
—— 49. A trillionth of a second. 
—— 50. A grouping of eight bits that represents one alpha- 


betic or special character. 


—— 51. A short-range wireless technology most commonly 


used to tag, track, and identify objects. 


—— 52. Around a million bytes; more precisely, 2 to the 


20th power. 


___ 53. A unit of information or computer storage equal 


to one quadrillion bytes, or 1,024 terabytes. 


Discussion Questions 


. What trends are occurring in the development and use 
of the major types of computer systems? 


. Will the convergence of PDAs, subnotebook PCs, 
and cell phones produce an information appliance 
that will make all of those categories obsolete? Why 
or why not? 


. Refer to the Real World Case on grid computing at 
the beginning of the chapter. Given the increasingly 
ubiquitous presence of computers on every desk, do 
you think that grid computing approaches will even- 
tually replace more centralized (e.g., mainframe- 
based) alternatives? Would security considerations 
play a role in that decision? Provide examples to 
justify your answer. 

. Do you think that information appliances like PDAs 


will replace personal computers (PCs) in business appli- 
cations? Explain. 


. Are networks of PCs and servers making mainframe 
computers obsolete? Explain. 


10. 


. Refer to the Real World Case on touch-screen technol- 


ogy in the chapter. What other applications of this 
technology could you envision? What do you think 

will be the next step in communicating with computers? 
Illustrate your answer with examples. 


. What are several trends that are occurring in computer 


peripheral devices? How do these trends affect business 
uses of computers? 


. What are several important computer hardware 


developments that you expect to happen in the next 
10 years? How will these affect the business use of 
computers? 


. What processor, memory, magnetic disk storage, and 


video display capabilities would you require for a 
personal computer that you would use for business 
purposes? Explain your choices. 


What other peripheral devices and capabilities would 
you want to have for your business PC? Explain your 
choices. 
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Analysis Exercises 


1. Hardware Costs 
Purchasing Computer Systems for Your Workgroup 
You have been asked to get pricing information for a 
potential purchase of PCs for the members of your 
workgroup. Go to the Internet to get prices for these 
units from Dell and Hewlett-Packard. Look for a high- 
end office desktop model. 

The table below shows the specifications for the ba- 
sic system you have been asked to price and potential 
upgrades to each feature. You will want to get a price 
for the basic system described below and a separate 
price for each of the upgrades shown. 


Component Basic Unit Upgrade 

CPU (gigahertz) 2.8 3.4 

Hard drive (gigabytes) 160 500 

RAM (gigabytes) 1 2 

Removable media 16x DVD+R/W 48x DVD+R/W 

Monitor 17-inch flat 19-inch flat 
screen screen 


Select the standard software licenses; your IT 
department will install the necessary software for your 
workgroup. Take a two-year warranty and servicing 
coverage offered by each supplier. If a two-year war- 
ranty is not available, simply note any differences in the 
coverage with the closest match. 


a. Prepare a spreadsheet summarizing this pricing in- 
formation and showing the cost from each supplier 
of the following options: (1) units with the basic 
configuration, (2) the incremental cost of each up- 
grade separately, and (3) the cost of a fully upgraded 
unit. If you cannot find features that exactly match 
the requirements, then use the next higher standard 
for comparison and make a note of the difference. 

b. Prepare a set of PowerPoint slides summarizing 
your results. Include a discussion of the warranty 
and servicing contract options offered by each 
supplier. 


2. Price and Performance Trends for Computer 

Hardware 
Hardware Analysis 
The table below details price and capacity figures for 
common components of personal computers. Typical 
prices for microprocessors, random-access memory 
(RAM), and hard disk storage are displayed. 

The performance of typical components has in- 
creased substantially over time, so the speed (for the 
microprocessor) or the capacity (for the storage devices) 


is also listed for comparison purposes. Although not all 
improvements in these components are reflected in 
these capacity measures, it is interesting to examine 
trends in these measurable characteristics. 


a. Create a spreadsheet based on the figures above and 
include a new row for each component, showing the 
price per unit of capacity (cost per megahertz of 
speed for microprocessors and cost per megabyte of 
storage for RAM and hard disk devices). 

b. Create a set of graphs highlighting your results and 
illustrating trends in price per unit of performance 
(speed) or capacity. 

c. Write a short paper discussing the trends you found. 
How long do you expect these trends to continue? 
Why? 

d. Prepare a summary presentation outlining the points 
from your paper (above). Be sure to /ink your Excel 
chart into the PowerPoint presentation so that it 
automatically updates when any data change in the 
spreadsheet. 


. Can Computers Think Like People? 


The Turing Test 

The Turing test is a hypothetical test to determine 
whether a computer system has reached the level of “ar- 
tificial intelligence.” If the computer can fool a person 
into thinking it is another person, then it has artificial 
intelligence. Except in very narrow areas, no computer 
has passed the Turing test. 

Free e-mail account providers such as Hotmail or 
Yahoo take advantage of this fact. They need to distin- 
guish between new account registrations generated by a 
person and registrations generated by spammers’ soft- 
ware. Why? Spammers burn through thousands of e- 
mail accounts to send millions of e-mails. To help them, 
spammers need automated tools to generate these ac- 
counts. Hotmail fights this practice by requiring regis- 
trants to enter correctly an alphanumeric code hidden 
within an image. Spammers’ programs have trouble 
correctly reading the code, but most humans do not. 
With this reverse Turing test, also called a “captcha,” 
Hotmail can distinguish between a person and a pro- 
gram and allow only humans to register. As a result, 
spammers must look elsewhere for free accounts. 


a. Aside from those mentioned above, in what applica- 
tions might businesses find it useful to distinguish 
between a human and a computer? 


Processor: Speed, MHz 25 


1991 1993 1995 

33 100 

Cost $180 $125 $275 
RAM chip: MB per chip 1 4 4 
Cost $55 $140 $120 
Hard drive: GB per drive 0.105 0.250 0.540 
Cost $480 $375 $220 


1997 1999 2001 2003 2005 
125 350 1000 3,000 3,800 
$250 $300 $251 $395 $549 
16 64 256 512 2,000 
$97 $125 $90 $59 $149 
20 8.0 40.0 160.0 320 
$250 $220 $138 $114 $115 


b. Describe a Turing test that a visually impaired per- 
son, but not a computer, might pass. 

c. Search the Internet for the term “captcha” and de- 
scribe its strengths and weaknesses. 


4. Radio Frequency Identification 


Input Device or Invasion of Privacy? 

Punch cards, keyboards, bar code scanners—the trend 
is clear. Input devices have continued to promote faster 
and more accurate data entry. Key to this advance is 
capturing data at their source, and no tool does this bet- 
ter than radio frequency identification (RFID) systems. 
An RFID transmitter sends out a coded radio signal. An 
RFID tag changes and “reflects” this signal back to an 
antenna. The RFID system can read the reflection’s 
unique pattern and record it in a database. Depending 
on the system, this pattern may be associated with a 
product line, shipping palette, or even a person. Al- 
though an RFID system’s range is limited to a few 
dozen feet, this approach enables remarkable inventory 
tracking that doesn’t rely on a human to keyboard in- 
teraction or scan. Except for the presence of a 1-inch- 
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square (5-cm-square) RFID tag, humans may have no 
idea an RFID system is in operation. 

Indeed, that may be part of the problem. Consum- 
ers have expressed concern that RFID chips attached to 
products they purchase may be used to track them. 
Others fear their government may require embedded 
RFID chips as a form of personal identification and 
tracking. What started as a new and improved input 
device has devolved into a matter of public policy. 


a. How would you feel if your university used RFID 
tags embedded in student IDs to replace the mag- 
netic swipe strip? On a campus, RFID tags might be 
used to control building access, manage computer 
access, or even automatically track class attendance. 

b. Enter “RFID” into an Internet search engine and 
summarize the search results. Of the top 20 results, 
how many were positive, negative, or neutral? 

c. Enter “RFID” and “privacy” into an Internet search 
engine, select a page expressing privacy concerns, 
and summarize them in a brief essay. Do you find 
these concerns compelling? 
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REAL WORLD 


Kimberly-Clark and Daisy Brands: 
Secrets to RFID Success 


imberly-Clark has been around for many years—135 

to be exact. And while it may not be a household 

name, Kimberly-Clark’s roster of products and brands 
certainly are: Kleenex, Scott, Huggies, and Pull-Ups, just to 
name a few. According to the company, 1.3 billion people use 
its products every day, contributing to $19.42 billion in sales 
in 2008. 

Behind the nurturing and homey images of those power- 
house brands is a company with operations in 37 countries 
and a global supply chain that enables Kimberly-Clark to 
sell its wares in 150 countries. 

As one of Wal-Mart’s top suppliers, Kimberly-Clark got 
onboard the RFID revolution early and has been one of the 
technology’s most ardent supporters. “Our goal is to evolve 
the capabilities of our supply chain to a demand-driven sup- 
ply network. One of the keys to achieving that vision is to 
have a highly integrated suite of supply chain systems that 
provide end-to-end visibility and as close to real-time infor- 
mation as possible,” says Mark Jamison, vice president of 
customer supply chain management at Kimberly-Clark. 

About four years ago, Kimberly-Clark started redesign- 
ing its supply chain business processes and integrating its 
systems to that end. The first business process it redesigned 
was forecast-to-stock. Following that was the redesign of the 
order-to-cash business processes; the company has chosen a 
SAP solution for both of these systems. 

“When we implement our new order-to-cash system, we 
will have an integrated suite of systems, and all of our users 
will be working with the same information as close to real 
time as possible. In addition, we are developing strategies to 
better leverage downstream data in our business processes 
for supply chain, category management and consumer in- 
sights,” says Jamison. 

For many companies, supply chain integration with 
other enterprise systems is the holy grail of making these 
initiatives pay off. Kimberly-Clark was no exception. “It was 
a key driver, but it wasn’t the only driver. Historically, our 
business processes were managed with what I described as a 
‘patch-quilt’ of systems. There was a lot of handing off of 
information up and down the supply chain,” says Jamison. 
“Not everyone was working with the same information—and 
not even close to real-time information. And what that tends 
to drive in the supply chain is surprises, variability and waste. 
We believe that getting to the end state of high-level inte- 
gration will allow us to have a more finite supply chain and 
also helps to manage that variability down and helps to take 
the waste out.” 

Real-time data improves the ability to see what’s going 
on in the marketplace and to understand, in a very timely 
manner, what’s happening with the promotions and what’s 
happening with a product in production. And it enables 
companies to respond, from a supply chain perspective, in a 
more cost-effective manner, and in a manner that helps 


increase stock levels and keep things on the shelf. Now that 
doesn’t mean that companies need real-time data at an hour 
level. But at Kimberly-Clark, managers want to look at it in 
8- to 16-hour buckets so that they do get a very timely read 
as to what’s happening in the marketplace. 

“Our strategy around RFID has been to focus on busi- 
ness processes and develop repeatable, scalable business 
processes that are enabled by the technology. The tech- 
nology in and of itself is not going to bring value to the 
supply chain. The value to the supply chain comes from 
reengineering your business processes and enabling those 
new business processes to work with the technology,” 
notes Jamison. 

Kimberly-Clark has focused on redesigning business 
processes and finding a way for the technology to support 
those processes. A perfect example of that is in what they 
have done in the area of promotional execution. Managers 
found that only 55 percent of the time did their promotional 
displays move to the floor in time to meet promotion or ad- 
vertising dates. And that was missing a real opportunity to 
get that product out to the customers along with retail part- 
ners. “So we redesigned the business process that tracks ex- 
ecution of our retail displays on sales floors. We developed 
daily reports, based on real-time data, and we included our 
retail operations people in the process so that on a daily basis 
we can identify those stores which have not executed the 
promotions,” says Jamison. 

The retail operations people can then be dispatched to 
go into the stores of retail partners, and they can get that 
display and product immediately on the floor. Shortly after 
the implementation of the new process that was enabled by 
the technology, Kimberly-Clark saw its execution of pro- 
motional displays improve from 55 percent to over 75 per- 
cent. The company also saw a corresponding increase in 
point of sale. “So while we saw the execution improve, we 
also saw sales increase at a corresponding rate. And I just 
think that’s an excellent example of how RFID, in combina- 
tion with redesigning a business process, can have big effect 
on the supply chain,” notes Jamison. Another area where 
they are starting to pilot is trailer management. In its large 
distribution center, the company has some 500-700 trailers 
parked in the yard. They are looking at a process where they 
can track the location and the identity of those trailers. 
When a trailer comes in the yard, an RFID tag will be ap- 
plied. The company believes it will be able to improve the 
accuracy of information and cut down on the amount of time 
it takes to track trailers in the yard. 

“In the supply chain, potentially, we could bring RFIDs 
back into the manufacturing environments, and trace raw 
materials. We’ve found that the bigger payback in the short 
term for us has been reducing out-of-stocks on the shelf. But 
we believe there are a lot more opportunities with RFID,” 
says Jamison. 


Daisy Brands, which sells its sour cream and cottage 
cheese through retail stores worldwide, joined Wal-Mart’s 
RFID mandate early on to avoid the rush of companies 
clamoring for help with RFID products, certification, and 
services. 

While others have hesitated, Daisy says its investment in 
RFID has been a boon, helping Daisy better manage the 
flow of its perishable products through Wal-Mart stores and 
ensure marketing promotions proceed as planned, according 
to Kevin Brown, Daisy’s information systems manager. It 
also lets Daisy’s other customers—including those who don’t 
use RFID—better track their orders. 

In 2003, Wal-Mart announced 100 top suppliers would 
launch its initial RFID effort. Daisy was among another 30- 
some companies that also volunteered. “We wanted a relation- 
ship with the appropriate partners and providers to get this 
done,” says Brown. “Quite frankly, I didn’t want to be in line.” 

“Tt was never really an ROI project for us,” he says. “It’s 
all about being a good partner.” That includes not just work- 
ing more closely with Wal-Mart, but improving tracking 
services for its other customers. “It’s just like going to FedEx 
to track a package,” says Brown. “Our customers can log on 
to our portal and see what was picked up and by whom.” 
Brown adds that Daisy is beginning to work more closely 
with Sam’s Club on that retailer’s RFID ramp-up efforts. 

Using Wal-Mart’s Retail Link Web site for suppliers, 
Brown can track, by lot number, how quickly pallets of prod- 
uct make it to stores and when they’re unpacked (Wal-Mart 
has readers at its dock entrances and on its cardboard case 
compactors) and when products pass through a store’s point- 
of-sale system based on their bar codes. Daisy’s own ERP 


CASE STUDY QUESTIONS 


1. Mark Jamison of Kimberly-Clark notes that it is busi- 
ness processes, and not the technology (e.g., RFID) 
itself, what brings value to the supply chain. What 
does he mean by that? What are the implications for 
companies seeking to learn from the likes of Kimberly- 
Clark and Daisy Brands? 


Both companies reviewed in the case noted they are 
only starting with RFID. What other uses of the tech- 
nology would be appropriate for these organizations? 
How would they benefit from them? Develop several 
alternatives. 


r 


3. While RFID-tagging appears to be very attractive to 
many companies, barcodes have been around for a long 
time and are a very efficient, simple, and well-understood 
technology. Do you expect RFID to completely replace 
barcodes anytime soon—for some industries or prod- 
ucts, but not for others? Justify your answer. 
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systems contain production and expiration information on 
all cases and pallets shipped. If product is moving too slowly, 
indicating a potential issue with freshness, Daisy can dis- 
patch someone to a store to investigate. The information 
also provides Daisy with insight about trends and behaviors 
among different types of stores. RFID is far superior to bar 
codes, Brown says, because it doesn’t require a line of sight 
from a reader. 

Brown is also using the information to track promotion 
success. If a Wal-Mart store, for example, is scheduled to run 
a two-for-one promotion on sour cream, the items are usu- 
ally loaded up in an easily accessible, waist-level “coffin 
cooler.” If Daisy doesn’t see a proportionately large number 
of cardboard cases getting destroyed via the compactor— 
which happens when a store loads up a coffin cooler—it 
knows the promo may not be taking place as planned. “We 
need to know the product is going to make it out of the 
warehouse and into coolers,” Brown says. “Is the store ready, 
and when the coupon breaks, is the product going to be 
there? We just went through promotions with the holidays, 
when lots of cooking happens, and we wanted to make sure 
inventory in warehouses is actually getting put into stores.” 

“There’s more benefit in the long run, using RFID in- 
ternally, than just compliance,” says Brown. “It’s one thing 
to give a customer a purchase order and an invoice, and 
another to give them insight into how you proceed with all 
of that.” 


Source: Adapted from Thomas Wailgum, “Kimberly-Clark’s Secrets to 
RFID Success,” CIO Magazine, July 30, 2007; and Mary Hayes Weier, “Dairy 
Company Lends Insight into Wal-Mart’s RFID Mandate,” InformationWeek, 
January 14, 2008. 


REAL WORLD ACTIVITIES 


1. Kimberly-Clark and Daisy Brands were two of the 
earliest adopters of RFID through their relationship 
with Wal-Mart. How has that initiative fared since it 
was announced? Go online and research the most 
recent developments. Prepare a report to highlight 
any successes and failures in the advancement toward a 
fully RFID-enabled supply chain for the giant retailer. 


2. What is the value of having access to real-time (or near 
real-time) information about sales and inventory? Are 
there any dangers to having this capability, such as 
overreacting to short-term trends? Break into small 
groups with your classmates to discuss this issue. 
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Business Application Software 

Software Suites and Integrated Packages 

Web Browsers and More 

Electronic Mail, Instant Messaging, and Weblogs 
Word Processing and Desktop Publishing 
Electronic Spreadsheets 

Presentation Graphics 

Personal Information Managers 

Groupware 

Software Alternatives 
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Programming Software 


Real World Case: Wolf Peak International: Failure and 
Success in Application Software for the Small-to-Medium 
Enterprise 


Business 
Applications 


. Describe several important trends occurring in 


computer software. 


. Give examples of several major types of application 


and system software. 


. Explain the purpose of several popular software 


packages for end-user productivity and 
collaborative computing. 


. Define and describe the functions of an operating 


system. 


. Describe the main uses of computer programming 


software, tools, and languages. 


. Describe the issues associated with open source 


software. 
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Introduction 
to Software 


What Is Software? 


Types of Software 


Application Software 
for End Users 


Application Software: End-User 
Applications 


This chapter provides an overview of the major types of software you depend on as you 
work with computers and access computer networks. It discusses their characteristics 
and purposes and gives examples of their uses. Before we begin, let’s look at an example 
of the changing world of software in business. 

Read the Real World Case discussing some innovative and successful implementa- 
tions of Software-as-a-Service (SaaS). We can learn a lot about the promise of this 
approach to technology use from this example. See Figure 4.1. 


To fully appreciate the need for and value of the wide variety of software available, we 
should be sure we understand what software is. Software is the general term for vari- 
ous kinds of programs used to operate and manipulate computers and their peripheral 
devices. One common way of describing hardware and software is to say that software 
can be thought of as the variable part of a computer and hardware as the invariable 
part. There are many types and categories of software. We will focus our attention on 
the different types of software and its uses in this chapter. 


Let’s begin our analysis of software by looking at an overview of the major types and 
functions of application software and system software available to computer users, 
shown in Figure 4.2. This figure summarizes the major categories of system and ap- 
plication software we will discuss in this chapter. Of course, this figure is a conceptual 
illustration. The types of software you will encounter depend primarily on the types of 
computers and networks you use and on the specific tasks you want to accomplish. We 
will discuss application software in this section and the major types of system software 
in Section II. 


Figure 4.2 shows that application software includes a variety of programs that can be 
subdivided into general-purpose and function-specific application categories. General- 
purpose application programs are programs that perform common information 
processing jobs for end users. For example, word processing, spreadsheet, database 
management, and graphics programs are popular with microcomputer users for home, 
education, business, scientific, and many other purposes. Because they significantly 
increase the productivity of end users, they are sometimes known as productivity pack- 
ages. Other examples include Web browsers, e-mail, and groupware, which help 
support communication and collaboration among workgroups and teams. 

An additional common way of classifying software is based on how the software 
was developed. Custom software is the term used to identify software applications that 
are developed within an organization for use by that organization. In other words, the 
organization that writes the program code is also the organization that uses the final 
software application. In contrast, COTS software (an acronym that stands for commer- 
cial off-the-shelf) is developed with the intention of selling the software in multiple 
copies (and usually for a profit). In this case, the organization that writes the software 
is not the intended target audience for its use. 

Several characteristics are important when describing COTS software. First, 
as stated in our definition, COTS software products are sold in many copies with 
minimal changes beyond scheduled upgrade releases. Purchasers of COTS software 
generally have no control over the specification, schedule, evolution, or access to 
either the source code or the internal documentation. A COTS product is sold, leased, 
or licensed to the general public, but in virtually all cases, the vendor of the product 
retains the intellectual property rights of the software. Custom software, in contrast, 
is generally owned by the organization that developed it (or that paid to have it 


REAL WORLD 


eneral Electric’s supply chain is not simply enor- 

mous. It’s a Byzantine web of sourcing partners, 

touching all corners of the globe: 500,000 suppli- 
ers in more than 100 countries that cut across 14 different 
languages. Each year, GE spends some $55 billion among its 
vast supplier base. 

Long-time GE CIO Gary Reiner knows this problem all 
too well, since, among his other duties, he is responsible for 
how the $173 billion conglomerate spends that $55 billion, 
utilizing GE’s Six Sigma practices and taking advantage of its 
hefty purchasing power. GE, for instance, buys $150 million 
in desktops and laptops each year from a single supplier, 
Dell—“at a very low price,” says Reiner. 

For years, GE’s Global Procurement Group faced a chal- 
lenging reality: trying to accurately track and make sense of all 
of the supply chain interactions with half a million suppliers— 
contracts, compliance initiatives, certifications, and other criti- 
cal data, which needed to be centrally stored, managed, and 
made accessible to thousands across the globe. GE was using 
what it called a Global Supplier Library, a homegrown system 
that, Reiner says, had a “rudimentary capability.” Reiner and 
his staff knew that GE needed something better, but they 


FIGURE 4.1 


__ Software-as-a-Service enables one of the largest 
and most impressive supply chains in the world. 


Source: ©Chuck Savage/Corbis. 
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GE, H.B. Fuller Co., and Others: 
Successful Implementations of 
Software-as-a-Service 


didn’t want to build it. They wanted a supplier information 
system that was easy to use and install, could unite GE’s sourc- 
ing empire into one central repository, had multilanguage capa- 
bilities, and also offered “self-service” functionality so that each 
of its suppliers could manage its own data. 

The destination was obvious: To achieve one common 
view of its supplier base, and one version of the truth in all 
that data, a goal which torments nearly every company today. 
But to get there, Reiner and his IT and procurement teams 
took a different route. In 2008, GE bought the application of 
a little-known Software-as-a-Service (SaaS) vendor that would 
ultimately become the largest SaaS deployment to date. 

“When we judge a solution, we are indifferent to 
whether it’s hosted by a supplier or by us,” Reiner says. “We 
look for the functionality of the solution and at the price.” 
And that, he claims, has been the way they’ve always oper- 
ated. Reiner says that his group doesn’t see a big difference 
in cost and in capabilities between on-premise and SaaS 
products. “And let me emphasize,” he adds, “we don’t see a 
big difference in cost either from the point of view of the 
ongoing operating costs, or the transition costs.” Further- 
more, when looking at implementation costs, “they’re 
largely around interfacing with existing systems, process 
changes and data cleansing,” he says. “Those three costs ex- 
ist regardless of whether GE hosts that application or 
whether the supplier hosts that application.” 

‘The Aravo technology platform, which was untested at 
GE’s level of requirements, and with just 20 or so customers, 
coupled with the sheer scale of GE’s needs did not really 
concern Reiner. “We could have been concerned about 
that,” he concedes. “But that would have also been a concern 
if we had hosted the software on our own servers. We knew 
Aravo could handle it.” Plus, Reiner says that no other sup- 
ply chain vendor offered the type of functionality that Aravo’s 
SIM product offered, and Reiner and his team reasoned that 
it was much cheaper to buy than build. “We’d much rather 
work with them,” he says, “than build it on our own.” One 
GE sourcing manager told Aravo that GE’s ROI on the 
project is not just positive, “it’s massively positive.” 

“They’re using SaaS for 100,000 users and 500,000 suppli- 
ers in six languages: that’s a major technology deployment 
shift,” says Mickey North Rizza, research director at AMR 
Research. She says that the sheer volume of transactions, com- 
bined with the fact that GE supply chain and procurement 
employees around the world can now access the same sourcing 
partner information, all from the same central spot, is signi- 
ficant not only for the supply chain management space but also 
for the SaaS and cloud computing world. “Finally we have a 
very large company tackling the data transparency issue by 
using a SaaS product,” North Rizza says. “It’s a huge deal.” 

So far, the thorny issue of data quality in GE’s supplier data 
has been improved, because suppliers now use the self-service 
capabilities in the SaaS system to manage their own data. 
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GE has 327,000 employees worldwide, and its sourcing sys- 
tems have more than 100,000 users. There is still more work to 
do to the SIM platform—for example, GE sourcing employees 
will add more workflows and new queries to the system; more 
languages might be added as well (six are operational now). 

Reiner says that GE is committed to working with Aravo 
for the long term and that the system has performed well so 
far. And SaaS, as an application delivery mechanism, appears 
to have a bright future at GE. 

When Steven John took over as CIO at specialty chemi- 
cal manufacturer H.B. Fuller Co., he inherited a North 
American payroll system implementation that was expensive 
and going nowhere. The business units hadn’t participated 
in the technology decision, and the project was bogged down 
with customization issues and other concerns. John chose to 
relinquish control of payroll software and switched to SaaS. 

“T wanted to do an implementation that was simple and 
straightforward—to configure but not customize—and see the 
benefits of a standard, global platform,” John says. “This was a 
way to teach, save money and outsource a noncore system.” 
Giving up control was an easy trade-off compared with the 
headaches he would face trying to fix the existing software. 

“Yow’re getting a lot more innovation,” says Ray Wang, 
an analyst at Forrester Research Inc. “The products are a lot 
more configurable than what most people have in their own 
applications. You can change fields, rename things, and move 
attributes and workflows. So there’s a good level of control 
there.” 

What’s more, the configuration choices are more refined 
and well thoughtout, giving users a few good choices instead of 
myriad options. John found that configuration rather than cus- 
tomization allows H.B. Fuller to maintain its “lean core.” “I 
believe that more standardization leads to more agility,” John 
says. “SaaS allows us to say, “This is good enough . . . for what 
we need.’ So you don’t end up with these horrible situations 
where you have these highly customized systems. We go with 
configuration option A, B or C. If one of those three doesn’t 
meet our need, we can try to influence the next release. But in 
most cases, A, B or C is going to meet the need.” 

At H.B. Fuller, the move to SaaS for human resources 
tools allowed the company to empower its people. “I can do 


CASE STUDY QUESTIONS 


1. What factors should companies take into consideration 
when making the decision between developing their 
own applications, purchasing them from a vendor, or 
taking the SaaS route, as discussed here? Make a list of 
factors and discuss their importance to this decision. 


2. What risks did GE take on when they contracted with a 
small and less experienced vendor? What contingencies 
could have been put in place to prevent any problems 
from arising? Provide several examples. 


3. What should companies do if none of the “configuration 
options” perfectly fits with their needs? Should they 
attempt to customize, or select the least-worst 
alternative? When would they do each? 


a reorganization and have it reflected within minutes, and I 
don’t have to call someone in HR to update everything,” 
John says. “I can also pull up other people’s organization 
charts and see where they are and what they’re doing and 
better understand the organization.” 

When it comes to managing SaaS, neither the IT 
department nor the business unit using the software should 
be eager to relinquish control. “The buying decisions are 
shifting from IT to the business leaders,” who often opt to 
charge the software as an expense rather than wait for ap- 
proval through the capital budget committee, Wang says. 
Still, he adds, “it’s very important to engage IT in these SaaS 
decisions because there are overall IT architectures and 
blueprints to consider.” It becomes very costly when applica- 
tions don’t integrate or interoperate well with one another. 

“It’s good to at least have some parameters and policies 
in place so that people understand what type of apps will 
work better within the environment, what will be cheaper to 
share information and data with,” says Wang. 

One of the problems with SaaS is that if your vendor 
were to go bankrupt, everything would shut down. You don’t 
own the software. It’s on lease. The question is, what do you 
own? If the vendor doesn’t have a separate on-premises 
deployment option, “you need the ability to take out trans- 
actional data, master file information, any kind of migration 
programs, just in case, so you can convert it to an on- 
premises alternative if they were to go down,” Wang says. 

In the long term, Wang envisions an IT culture where 
software as a service is commonplace. “We may live in a 
world where everything is provisioned. All our applications 
don’t stay on premises, and business leaders are out procur- 
ing applications,” he says. “IT teams are testing them to 
make sure they work well in the environment and there are 
no bugs or viruses and things integrate well, and basically 
the IT staff will spend a lot of time provisioning services and 
implementing, integrating, doing installs. That’s where we 
envision the market in 2020.” 


Source: Adapted from Thomas Wailgum, “GE CIO Gets His Head in the 
Cloud for New SaaS Supply Chain App,” CIO Magazine, January 22, 2009; 
and Stacy Collett, “SaaS Puts Focus on Functionality,” Computerworld, 
March 23, 2009. 


REAL WORLD ACTIVITIES 


1. The case mentions that GE’s implementation of SaaS 
was, at the time, the largest rollout of the technology in 
the world. What other companies have started using 
SaaS extensively since? Go online and research recent 
implementations. How are those different from GE’s 
experience? Prepare a report to share your findings. 


2. By implementing systems based on SaaS, companies are 
relinquishing control over ownership of the technology 
and are putting access to valuable data on the hands of a 
third party. What are the perils of taking this approach? 
How could companies guard against them? Break into 
small groups to discuss these issues and provide some 
suggestions and recommendations. 
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FIGURE 4.2 = An overview of computer software. Note the major types and examples of application and 


system software. 
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developed), and the specifications, functionality, and ownership of the final product 
are controlled or retained by the developing organization. 

The newest innovation in software development is called open-source software. 
In this approach, developers collaborate on the development of an application using 
programming standards that allow for anyone to contribute to the software. Further- 
more, as each developer completes his or her project, the code for the application 
becomes available and free to anyone else who wishes to use it. We will discuss this 
new approach to software development in greater detail in Section II of this chapter. 


Visa International is well known and respected all over the world for the innovations 
it has brought to global commerce with its sophisticated consumer payments process- 
ing system. Until recently, however, Visa had many outdated systems managing some 
of its most critical internal business processes. After an analysis by KPMG in 1999, 
it was determined that many of Visa’s internal systems were becoming a risk to the 
organization. 

‘The KPMG analysis found that Visa’s internal systems were unnecessarily complex 
and used few of the advantages that technology can bring to an enterprise. For exam- 
ple, Visa’s financial management infrastructure was fragmented, complex, and costly 
to maintain. Often, data were not standardized, resulting in many different databases 
generating disparate interpretations of business data. Even more surprisingly, Visa’s 
corporate purchasing, accounts payable, and asset management functions were still 
being managed manually, resulting in time-consuming delays and discrepancies. 

Fragmented internal systems are not unusual in a company like Visa that has had 
rapid double-digit growth for 11 consecutive years. After a careful review of available 
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software solutions, Visa chose the Oracle E-Business Suite of business application soft- 
ware to remedy the problems that come with a complex and inefficient back office. 

The results of conversion to the new software suite were spectacular. The modern 
financial applications in the Oracle product turned Visa’s cumbersome, outdated desktop 
procedures into Web-based e-business solutions that met Visa’s demands for all roles and 
processes. For example, Oracle Financials automated Visa’s old organization and created 
a more agile system capable of accounting for the impact of financial activities on a global 
scale. Accounts payable was transformed from a cumbersome manual process into a 
streamlined system that automatically checks invoices against outgoing payments and 
requests reviews of any discrepancies via e-mail. Oracle iProcurement also helped auto- 
mate Visa’s requisitioning and purchasing system by streamlining the entire purchasing 
process and implementing a self-service model to increase processing efficiency. 


Source: Adapted from Oracle Corporation, “Visa to Save Millions a Year by Automating Back-Office Processes with 
Oracle E-Business Suite,” Customer Profile, www.oracle.com, September 13, 2002. 
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resource planning, and supply chain management. Other examples are software packages 
that Web-enable electronic commerce applications or apply to the functional areas of 
business like human resource management and accounting and finance. Still other soft- 
ware empowers managers and business professionals with decision support tools like 
data mining, enterprise information portals, or knowledge management systems. 

We will discuss these applications in upcoming chapters that go into more detail 
about these business software tools and applications. For example, data warehousing 
and data mining are discussed in Chapters 5 and 9; accounting, marketing, manufac- 
turing, human resource management, and financial management applications are 
covered in Chapters 7 and 8. Customer relationship management, enterprise resource 
planning, and supply chain management are also covered in Chapter 7. Electronic 
commerce is the focus of Chapter 8, and decision support and data analysis applica- 
tions are explored in Chapter 9. Figure 4.3 illustrates some of the many types of business 
application software that are available today. These particular applications are 
integrated in the Oracle E-Business Suite software product of Oracle Corp. 


FIGURE 4.3 The business applications in Oracle’s E-Business Suite software illustrate some of the many types of 
business application software being used today. 


ORACLE E-BUSINESS SUITE 


Advanced Planning Business Intelligence Contracts 
e-Commerce Enterprise Asset Management Exchanges 


Financials Human Resources Interaction Center 
Manufacturing Marketing Order Fulfillment 
Procurement Product Development Professional Services Automation 

Projects Sales Service 

‘Training ‘Treasury 


Source: Adapted from Oracle Corp., “E-Business Suite: Manage by Fact with Complete Automation and Complete Information,” 
Oracle.com, 2002. 
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Software Let’s begin our discussion of popular general-purpose application software by looking 


Suites and 


at software suites. The most widely used productivity packages come bundled together 
as software suites, such as Microsoft Office, Lotus SmartSuite, Corel WordPerfect 


In teg rated Office, Sun’s StarOffice, and their open-source product, OpenOffice. Examining their 
Packa ges components gives us an overview of the important software tools that you can use to 


increase your productivity. 


Figure 4.4 compares the basic programs that make up the top four software suites. 
Notice that each suite integrates software packages for word processing, spreadsheets, 
presentation graphics, database management, and personal information management. 
Microsoft, Lotus, Corel, and Sun bundle several other programs in each suite, 
depending on the version you select. Examples include programs for Internet access, 
e-mail, Web publishing, desktop publishing, voice recognition, financial management, 


and electronic encyclopedias. 


A software suite costs a lot less than the total cost of buying its individual packages 
separately. Another advantage is that all programs use a similar graphical user interface 
(GUD of icons, tool and status bars, menus, and so on, which gives them the same 
look and feel and makes them easier to learn and use. Software suites also share 
common tools such as spell checkers and help wizards to increase their efficiency. An- 
other big advantage of suites is that their programs are designed to work together 
seamlessly and import each other’s files easily, no matter which program you are using 
at the time. These capabilities make them more efficient and easier to use than a 


variety of individual package versions. 


Of course, putting so many programs and features together in one supersize pack- 
age does have some disadvantages. Industry critics argue that many software suite 
features are never used by most end users. The suites take up a lot of disk space (often 
upward of 250 megabytes), depending on which version or functions you install. 
Because of their size, software suites are sometimes derisively called bloatware by their 
critics. The cost of suites can vary from as low as $100 for a competitive upgrade to 


more than $700 for a full version of some editions of the suites. 


‘These drawbacks are one reason for the continued use of integrated packages like 
Microsoft Works, Lotus eSuite WorkPlace, and AppleWorks. Integrated packages 
combine some of the functions of several programs—word processing, spreadsheets, 
presentation graphics, database management, and so on—into one software package. 

Because integrated packages leave out many features and functions that are in 
individual packages and software suites, they are considered less powerful. Their 
limited functionality, however, requires a lot less disk space (often less than 10 mega- 
bytes), costs less than $100, and is frequently preinstalled on many low-end 
microcomputer systems. Integrated packages offer enough functions and features for 
many computer users while providing some of the advantages of software suites in a 


smaller package. 


FIGURE 4.4 The basic program components of the top four software suites. Other programs may be included, 


depending on the suite edition selected. 
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FIGURE 4.5 


Using the Microsoft 
Internet Explorer browser 
to access Google and other 
search engines on the 
Netscape.com Web site. 
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Source: Netscape content © 2009. Used with permission. 


The most important software component for many computer users today is the once 
simple and limited, but now powerful and feature-rich, Web browser. Browsers such as 
Microsoft Explorer, Netscape Navigator, Firefox, Opera, or Mozilla are software applica- 
tions designed to support navigation through the point-and-click hyperlinked resources 
of the World Wide Web and the rest of the Internet, as well as corporate intranets and 
extranets. Once limited to surfing the Web, browsers are becoming the universal software 
platform from which end users launch information searches, e-mail, multimedia file 
transfers, discussion groups, and many other Internet-based applications. 

Figure 4.5 illustrates the use of the Microsoft Internet Explorer browser to access search 
engines on the Netscape.com Web site. Netscape uses top-rated Google as its default search 
engine but also provides links to other popular search tools including Ask Jeeves, Look 
Smart, Lycos, and Overture. Using search engines to find information has become an 
indispensable part of business and personal Internet, intranet, and extranet applications. 

Industry experts predict the Web browser will be the model for how most people use 
networked computers in the future. Even today, whether you want to watch a video, 
make a phone call, download some software, hold a videoconference, check your e-mail, 
or work on a spreadsheet of your team’s business plan, you can use your browser to 
launch and host such applications. Thats why browsers are sometimes called the univer- 
sal client, that is, the software component installed on all of the networked computing 
and communications devices of the clients (users) throughout an enterprise. As an aside, 
this entire book was revised and edited in a browser-based authoring program called 
PowerXEditor (we will learn more about PowerXEditor later in this chapter). 


The first thing many people do at work, all over the world, is check their electronic 
mail. E-mail has changed the way people work and communicate. Millions of end users 
now depend on e-mail software to communicate with one another by sending and re- 
ceiving electronic messages and file attachments via the Internet or their organizations’ 
intranets or extranets. E-mail is stored on networked mail servers until you are ready. 
Whenever you want to, you can read your e-mail by displaying it on your workstation. 


FIGURE 4.6 

Using the e-mail features 
of the Yahoo! instant 
messaging system. 
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So, with only a few minutes of effort (and a few microseconds of transmission time), a 
message to one or many individuals can be composed, sent, and received. 

As we mentioned previously, e-mail software is now a mainstay component of top 
software suites and Web browsers. Free e-mail packages such as Microsoft HotMail, 
Yahoo! Mail, and Netscape WebMail are available to Internet users from online ser- 
vices and Internet service providers. Most e-mail software like Microsoft Outlook 
Express, Windows Mail, or Netscape Messenger can route messages to multiple end 
users based on predefined mailing lists and provide password security, automatic mess- 
age forwarding, and remote user access. They also allow you to store messages in fold- 
ers and make it easy to add documents and Web file attachments to e-mail messages. 
E-mail packages enable you to edit and send graphics and multimedia files, as well as 
text, and provide computer conferencing capabilities. In addition, your e-mail soft- 
ware may automatically filter and sort incoming messages (even news items from 
online services) and route them to appropriate user mailboxes and folders. Finally, 
many e-mail clients also include calendaring and contact management functions. 

Instant messaging (IM) is an e-mail/computer-conferencing hybrid technology 
that has grown so rapidly that it has become a standard method of electronic messag- 
ing for millions of Internet users worldwide. By using instant messaging, groups of 
business professionals or friends and associates can send and receive electronic messages 
instantly and thus communicate and collaborate in real time in a near-conversational 
mode. Messages pop up instantly in an IM window on the computer screens of everyone 
in your business workgroup or friends on your IM “buddy list,” as long as they are 
online, no matter what other tasks they are working on at that moment. Instant mess- 
aging software can be downloaded and IM services implemented by subscribing to 
many popular IM systems, including AOL's Instant Messenger and ICQ, MSN 
Messenger, and Yahoo Messenger. See Figure 4.6. 

A Weblog (usually shortened to blog or written as “Web log” or “weblog”) is a 
Web site of personal or noncommercial origin that uses a dated log format updated 
daily or very frequently with new information about a particular subject or range of 


Source: ©Reproduced with permission of Yahoo! Inc. 
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Word 
Processing 
and Desktop 
Publishing 


FIGURE 4.7 

Using the Microsoft Word 
word processing package. 
Note the insertion of a table 
in the document. 


subjects. The information can be written by the site owner, gleaned from other Web 
sites or other sources, or contributed by users via e-mail. 

A Weblog often has the quality of being a kind of “log of our times” from a par- 
ticular point of view. Generally, Weblogs are devoted to one or several subjects or 
themes, usually of topical interest. In general, Weblogs can be thought of as develop- 
ing commentaries, individual or collective, on their particular themes. A Weblog may 
consist of the recorded ideas of an individual (a sort of diary) or be a complex collabo- 
ration open to anyone. Most of the latter are moderated discussions. 

Because there are a number of variations on this idea and new variations can easily 
be invented, the meaning of this term is apt to gather additional connotations with 
time. As a formatting and content approach for a Web site, the Weblog seems popular 
because the viewer knows that something changes every day, there is a personal (rather 
than bland commercial) point of view, and, on some sites, there is an opportunity to 
collaborate with or respond to the Web site and its participants. 


Software for word processing has transformed the process of writing just about any- 
thing. Word processing packages computerize the creation, editing, revision, and 
printing of documents (e.g., letters, memos, reports) by electronically processing text 
data (words, phrases, sentences, and paragraphs). Top word processing packages like 
Microsoft Word, Lotus WordPro, Corel WordPerfect, and OpenOffice Writer can 
provide a wide variety of attractively printed documents with their desktop publishing 
capabilities. These packages can also convert documents to HTML format for 
publication as Web pages on corporate intranets or the World Wide Web. 

Word processing packages also provide other helpful features. For example, a spell- 
ing checker capability can identify and correct spelling errors, and a thesaurus feature 
helps you find a better choice of words to express ideas. You can also identify and cor- 
rect grammar and punctuation errors, as well as suggest possible improvements in 
your writing style, with grammar and style checker functions. In addition to convert- 
ing documents to HTML format, you can use the top packages to design and create 
Web pages from scratch for an Internet or intranet Web site. See Figure 4.7. 
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Source: Courtesy of Microsoft®. 


Electronic 
Spreadsheets 


FIGURE 4.8 

Using an electronic 
spreadsheet package, 
Microsoft Excel. Note the 
use of graphics. 
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End users and organizations can use desktop publishing (DTP) software to pro- 
duce their own printed materials that look professionally published. ‘That is, they 
can design and print their own newsletters, brochures, manuals, and books with 
several type styles, graphics, photos, and colors on each page. Word processing 
packages and desktop publishing packages like Adobe InDesign, Microsoft 
Publisher, and QuarkXPress are used for desktop publishing. Typically, text mate- 
rial and graphics can be generated by word processing and graphics packages and 
imported as text and graphics files. Optical scanners may be used to input text and 
graphics from printed material. You can also use files of clip art, which are predrawn 
graphic illustrations provided by the software package or available from other 
sources. 


Spreadsheet packages like Lotus 1-2-3, Microsoft Excel, OpenOffice Calc, and Corel 
QuattroPro are used by virtually every business for analysis, planning, and modeling. 
They help you develop an electronic spreadsheet, which is a worksheet of rows and col- 
umns that can be stored on your PC or on a network server, or converted to HTML 
format and stored as a Web page or Web sheet on the World Wide Web. Developing 
a spreadsheet involves designing its format and developing the relationships (formu- 
las) that will be used in the worksheet. In response to your input, the computer per- 
forms necessary calculations according to the formulas you defined in the spreadsheet 
and displays the results immediately, whether on your workstation or Web site. Most 
packages also help you develop charts and graphic displays of spreadsheet results. See 
Figure 4.8. 

For example, you could develop a spreadsheet to record and analyze past and 
present advertising performance for a business. You could also develop hyperlinks to 
a similar Web sheet on your marketing team’s intranet Web site. Now you have a 
decision support tool to help you answer what-if questions you may have about adver- 
tising. For example, “What would happen to market share if advertising expenses 
were to increase by 10 percent?” To answer this question, you would simply change 
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Graphics 


FIGURE 4.9 


Using the slide preview 
feature of a presentation 
graphics package, Microsoft 
PowerPoint. 


the advertising expense formula on the advertising performance worksheet you 
developed. The computer would recalculate the affected figures, producing new mar- 
ket share figures and graphics. You would then have better insight into the effect of 
advertising decisions on market share. Then you could share this insight with a note 
on the Web sheet on your team’s intranet Web site. 


Presentation graphics software packages help you convert numeric data into graph- 
ics displays such as line charts, bar graphs, pie charts, and many other types 
of graphics. Most of the top packages also help you prepare multimedia presenta- 
tions of graphics, photos, animation, and video clips, including publishing to the 
World Wide Web. Not only are graphics and multimedia displays easier to com- 
prehend and communicate than numeric data, but multiple-color and multiple- 
media displays can more easily emphasize key points, strategic differences, and 
important trends in the data. Presentation graphics have proved to be much more 
effective than tabular presentations of numeric data for reporting and communi- 
cating in advertising media, management reports, or other business presentations. 
See Figure 4.9. 

Presentation graphics software packages like Microsoft PowerPoint, OpenOffice 
Impress, Lotus Freelance, or Corel Presentations give you many easy-to-use capabili- 
ties that encourage the use of graphics presentations. For example, most packages help 
you design and manage computer-generated and orchestrated slide shows containing 
many integrated graphics and multimedia displays. You can select from a variety of 
predesigned templates of business presentations, prepare and edit the outline and notes 
for a presentation, and manage the use of multimedia files of graphics, photos, sounds, 
and video clips. Of course, the top packages help you tailor your graphics and multi- 
media presentation for transfer in HTML format to Web sites on corporate intranets 
or the World Wide Web. 


Source: Courtesy of Microsoft®. 
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Using a personal 
information manager 


(PIM): Microsoft Outlook. 
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The personal information manager (PIM) is a popular software package for end-user 
productivity and collaboration, as well as a popular application for personal digital as- 
sistant (PDA) handheld devices. Various PIMs such as Lotus Organizer and Microsoft 
Outlook help end users store, organize, and retrieve information about customers, 
clients, and prospects or schedule and manage appointments, meetings, and tasks. A 
PIM package will organize data you enter and retrieve information in a variety of 
forms, depending on the style and structure of the PIM and the information you want. 
For example, information can be retrieved as an electronic calendar or list of appoint- 
ments, meetings, or other things to do; as the timetable for a project; or as a display of 
key facts and financial data about customers, clients, or sales prospects. Most PIMs 
now include the ability to access the World Wide Web and provide e-mail capability. 
Also, some PIMs use Internet and e-mail features to support team collaboration by 
sharing information such as contact lists, task lists, and schedules with other networked 
PIM users. See Figure 4.10. 


Groupware is software that helps workgroups and teams collaborate to accomplish 
group assignments. Groupware is a category of general-purpose application software 
that combines a variety of software features and functions to facilitate collaboration. 
For example, groupware products like Lotus Notes, Novell GroupWise, and Microsoft 
Exchange support collaboration through e-mail, discussion groups and databases, 
scheduling, task management, data, audio and videoconferencing, and so on. 

Groupware products rely on the Internet and corporate intranets and extranets to 
make collaboration possible on a global scale by virtual teams located anywhere in the 
world. For example, team members might use the Internet for global e-mail, project 
discussion forums, and joint Web page development. Or they might use corporate 
intranets to publish project news and progress reports and work jointly on documents 
stored on Web servers. See Figure 4.11. 
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Lotus Sametime enables 
workgroups and project 
teams to share spreadsheets 
and other work documents 
in an interactive online 
collaboration process. 
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Collaborative capabilities are also being added to other software to give it groupware- 
like features. For example, in the Microsoft Office software suite, Microsoft Word 
keeps track of who made revisions to each document, Excel tracks all changes made to 
a spreadsheet, and Outlook lets you keep track of tasks you delegate to other team 
members. Recently, the Microsoft Office suite has included functions that allow 
multiple people to work on and edit the same document at the same time. Using this 
feature, any changes made by one team member will become visible to all team 
members as they are being made. 

‘Two recent additions to the collaborative software marketplace are Microsoft’s 
Windows SharePoint Services and IBM’s WebSphere. Both products allow teams to 
create sophisticated Web sites for information sharing and document collaboration 
quickly. Furthermore, businesses can use these products as a platform for application 
development to facilitate the efficient creation of Web-based business portals and 
transaction processing applications. Web sites built with collaborative development 
tools can integrate a wide variety of individual applications that can help increase both 
individual and team productivity. 


Many businesses are finding alternatives to acquiring, installing, and maintaining busi- 
ness application software purchased from software vendors or developing and main- 
taining their own software in-house with their own software developer employees. For 
example, as we will discuss further in Chapter 12, many large companies are owtsourc- 
ing the development and maintenance of software they need to contract programming 
firms and other software development companies, including the use of offshore soft- 
ware developers in foreign countries, and employing the Internet to communicate, 
collaborate, and manage their software development projects. 


A large and fast-growing number of companies are turning to application service 
providers (ASPs), instead of developing or purchasing the application software 
they need to run their businesses. Application service providers are companies that 


FIGURE 4.12 


Salesforce.com is a leading 
application service provider 
of Web-based sales 
management and customer 
relationship management 
services to both large and 
small businesses. 
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own, operate, and maintain application software and the computer system resources 
(servers, system software, networks, and IT personnel) required to offer the use of the 
application software for a fee as a service over the Internet. The ASP can bill their 
customers on a per-use basis or on a monthly or annual fee basis. 

Businesses are using an ASP instead of owning and maintaining their own software 
for many reasons. One of the biggest advantages is the low cost of initial investment, 
and in many cases, the short time needed to get the Web-based application set up and 
running. The ASP’s pay-as-you-go fee structure is usually significantly less expensive 
than the cost of developing or purchasing, as well as running and maintaining, appli- 
cation software. In addition, using an ASP eliminates or drastically reduces the need 
for much of the IT infrastructure (servers, system software, and IT personnel) that 
would be needed to acquire and support application software, including the continual 
challenges of distributing and managing companywide software patches and upgrades. 
Consequently, the use of ASPs by businesses and other organizations is expected to 
accelerate in the coming years. See Figure 4.12. 


Salesforce.com CEO Marc Benioff cast his company as the impetus behind a new 
era in application development, removing any lingering doubt that he’s shooting to 
replace today’s dominant application vendors with Salesforce’s software-as-a-service 
model. “If we’re not, then I’ve been doing the wrong thing for the last 5 1/2 years,” 
Benioff says. “We want to be the ones that replace SAP and Siebel and PeopleSoft. 
Someone needs to, and it might as well be us.” 

To that extent, the company introduced two offerings: a customization toolkit 
called Customforce, spun off from its sforce application-development platform, and 
On-Demand Marketplace, a collection of third-party applications, tools, and services 
built by more than 60 certified partners using the company’s sforce Web-services 
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APIs. Customers can either use the combination of sforce and Customforce to rejigger 
their Salesforce applications to suit their needs, or, if those capabilities already have 
been built by one of Salesforce’s partners, they can buy them from the On-Demand 
Marketplace, which boasts tools for everything from data warehousing and enter- 
prise resource planning to project management and wireless extensions. 

Salesforce’s software-as-a-service model is getting companies to reexamine how 
they acquire and use applications. It’s frequently imitated, most notably by archrival 
Siebel Systems, which all but created the customer-relationship-management market 
and now sometimes appears to react to what Salesforce does more than the other 
way around. 

Benioff’s approach could boost the application-service-provider (ASP) model in 
general. ASPs of the late 1990s offered applications that couldn’t be customized, but 
advances such as beefed-up HTML, pervasive broadband connectivity, and the rise 
of Web services have let services providers—Salesforce in particular—build applica- 
tions specifically as hosted services and provide for substantial customization of those 
applications. Salesforce’s on-demand model allows those customizations to be trans- 
ferred when a hosted application is upgraded, overcoming a major reason business- 
technology managers hesitate to upgrade critical on-premises business applications. 

It’s too early to tell how widely Benioff’s vision will resonate, especially with large 
companies. Some, like Cisco Systems and payroll-processor Automatic Data Process- 
ing Inc., have licensed thousands of seats of Salesforce applications, but most of 
Salesforce’s customers are small and midsize businesses that can’t afford on-premises 
deployments of CRM software packages. Still, Salesforce has influenced the software 
industry disproportionately to its size and will continue to do so. “This is the kick-off 
of a major inflection point,” says Denis Pombriant, an analyst at Beagle Research 
Group. “They were a disruptive application. Now they’re a disruptive service and a 
disruptive platform.” 

Benioff is doggedly committed to his vision, betting that although his idea of “no 
software” is quaint now, it will ultimately prove to be an accurate forecast of a future 
in which the service quality, not programming sophistication, will determine which 
vendors thrive. “What we provide customers is not technology,” Benioff says. “We 
provide customers success.” 


Source: Adapted from Tony Kontzer, “Benioff’s Big Bet,” InformationWeek, November 8, 2004. 


One of the most recent advances in computing and software delivery is called cloud 
computing. Cloud computing is a style of computing in which software and, in some 
cases, virtualized hardware resources are provided as a service over the Internet. Users 
need not have knowledge of, expertise in, or control over the technology infrastruc- 
ture “in the cloud” that supports them. The term cloud is used as a metaphor for the 
Internet, based on how the Internet is often depicted in computer network diagrams. 

The concept incorporates technology trends that have the common theme of reli- 
ance on the Internet for satisfying the computing needs of the users. Examples of 
vendors providing cloud services include SAP Business ByDesign, MidlandHR’s 
“Trent as a Service,” Salesforce.com, and Google Apps, which provide common busi- 
ness applications online that are accessed from a Web browser, while the software and 
data are stored on the servers. 

Cloud computing is often confused with grid computing (recall the concept from 
Chapter 3 where the CPU power of multiple computers is harnessed to act like one 
big computer when necessary). Indeed, many cloud computing deployments depend 
on grids, but cloud computing can be seen as a natural next step from the grid model. 
‘The majority of cloud computing infrastructure consists of reliable services delivered 
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through data centers and built on servers with different levels of virtualization tech- 
nologies. The services are accessible anywhere that has access to networking infra- 
structure. The cloud appears as a single point of access for all the computing needs of 
consumers. 

As many computer software users generally do not own the infrastructure around 
them, they can avoid capital expenditure and consume resources as a service, paying 
instead for what they use. If this sounds alot like how you pay for your electricity or 
natural gas, it is because the same basic model has been adopted. Many cloud comput- 
ing offerings have adopted the utility computing model, which is analogous to how 
traditional utilities like electricity are consumed, while others are billed on a subscrip- 
tion basis. Sharing “perishable and intangible” computing power among multiple us- 
ers or enterprises can improve utilization rates, as servers are left idle less often because 
more people are accessing and using the computing resources. Through this approach, 
significant reductions in costs can be realized while increasing the overall speed of ap- 
plication development. A side effect of this approach is that a given user’s or enter- 
prise’s computing capacity can be scaled upward almost instantly as needed without 
having to own an infrastructure that is engineered to be ready for short-term peak 
loads. Cloud computing has been enabled by large increases in available commercial 
bandwidth which makes it possible to receive the same response times from central- 
ized infrastructure at other sites. 

The real benefit to the organization comes from the cost savings. Cloud comput- 
ing users can avoid capital expenditure on hardware, software, and services, by simply 
paying a provider only for what they use. As stated above, consumption is billed on a 
utility (e.g. resources consumed, like electricity) or subscription (e.g., time based, like 
a newspaper) basis, with little or no upfront cost. Other benefits of this time-sharing 
style approach are low barriers to entry, shared infrastructure and costs, low manage- 
ment overhead and immediate access to a broad range of applications. Users can 
generally terminate the contract at any time and the services are often covered 
by service level agreements with financial penalties in the event the agreed-upon 
service levels are not delivered. It is predicted that someday, everyone will compute 
“in the cloud.” 


Regardless of whether a software application is purchased COTS or accessed via an ASP, 
the software must be licensed for use. Software licensing is a complex topic that involves 
considerations of the special characteristics of software in the context of the underlying 
intellectual property rights, including copyright, trademark, and trade secrets, as well as 
traditional contract law, including the Uniform Commercial Code (UCC). 

Contrary to what many believe, when an individual or company buys a software 
application, they have not purchased rights of ownership. Rather, they have purchased 
a license to use the software under the terms of the software licensing agreement. 
Software is generally licensed to better protect the vendor’s intellectual property 
rights. The license often prohibits reverse engineering, modifying, disclosing, or 
transferring the software. In most cases, the license also gives the purchaser permis- 
sion to sell or dispose of the rights provided by the license but not to duplicate or resell 
multiple copies of the software. 

The requirement for licensing does not disappear when use of the software is ob- 
tained through an ASP. In this case, the license to dispense use of the software is 
granted to the ASP by the various software vendors, and in return, the ASP agrees to 
pay the software vendor a royalty based on the number of user accounts to which the 
ASP resells the rights. 

Software vendors are working hard to provide easy licensing and access to their 
products while simultaneously preventing software piracy, which serves only to raise 
the ultimate cost of the product. 

In the next section, we will learn about an entirely new approach to software li- 
censing: open-source code. 
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System Management 


System software consists of programs that manage and support a computer system 
and its information processing activities. For example, operating systems and network 
management programs serve as a vital software interface between computer networks 
and hardware and the application programs of end users. 

Read the Real World Case on the use of XML by large organizations. We can 
learn a lot about the business value of using software to share data from this example. 
See Figure 4.13. 


We can group system software into two major categories (see Figure 4.14): 


e System Management Programs. Programs that manage the hardware, software, 
network, and data resources of computer systems during the execution of the var- 
ious information processing jobs of users. Examples of important system manage- 
ment programs are operating systems, network management programs, database 
management systems, and system utilities. 


e System Development Programs. Programs that help users develop information 
system programs and procedures and prepare user programs for computer process- 
ing. Major software development programs are programming language translators 
and editors, and a variety of CASE (computer-aided software engineering) and other 
programming tools. We will take a closer look at CASE tools later in this chapter. 


‘The most important system software package for any computer is its operating system. 
An operating system is an integrated system of programs that manages the operations 
of the CPU, controls the input/output and storage resources and activities of the com- 
puter system, and provides various support services as the computer executes the 
application programs of users. 

The primary purpose of an operating system is to maximize the productivity of a 
computer system by operating it in the most efficient manner. An operating system 
minimizes the amount of human intervention required during processing. It helps 
your application programs perform common operations such as accessing a network, 
entering data, saving and retrieving files, and printing or displaying output. If you 
have any hands-on experience with a computer, you know that the operating system 
must be loaded and activated before you can accomplish other tasks. This requirement 
emphasizes that operating systems are the most indispensable components of the soft- 
ware interface between users and the hardware of their computer systems. 


An operating system performs five basic functions in the operation of a computer sys- 
tem: providing a user interface, resource management, task management, file manage- 
ment, and utilities and support services. See Figure 4.15. 


The User Interface. The user interface is the part of the operating system that 
allows you to communicate with it so you can load programs, access files, and accom- 
plish other tasks. Three main types of user interfaces are the command-driven, menu- 
driven, and graphical user interfaces. The trend in user interfaces for operating systems 
and other software is moving away from the entry of brief end-user commands, or 
even the selection of choices from menus of options. Instead, most software provides 
an easy-to-use graphical user interface (GUT) that uses icons, bars, buttons, boxes, and 
other images. These GUIs rely on pointing devices like the electronic mouse or touch 
pad to make selections that help you get things done. Currently, the most common 
and widely recognized GUI is the Microsoft Windows desktop. 


REAL WORLD 


CASE 


power consortium that distributes a mix of “green” 

and conventional electricity is implementing an 

XML-based settlements system that drives costs 
out of power distribution. The Northern California Power 
Agency (NCPA) is one of several state-chartered coordina- 
tors in California that schedules the delivery of power to the 
California power grid and then settles the payment due to 
suppliers. NCPA sells the power generated by the cities of 
Palo Alto and Santa Clara, as well as hydro- and geothermal 
sources farther north. 

Power settlements are a highly regulated and compli- 
cated process. Each settlement statement contains how much 
power a particular supplier delivered and how much was 
used by commercial vs. residential customers, and the two 
have different rates of payment. The settlements are compli- 
cated by the fact that electricity meters are read only once 
every 90 days; many settlements must be based on an esti- 
mate of consumption that gets revised as meter readings 
come in. 

On behalf of a supplier, NCPA can protest that fees for 
transmission usage weren’t calculated correctly, and the dis- 
pute requires a review of all relevant data. Getting one or 
more of these factors wrong is commonplace. “Power settle- 
ments are never completely settled,” says Bob Caracristi, 
manager of power settlements for NCPA. “Negotiations 
over details may still be going on a year or two after the 
power has been delivered.” 

Furthermore, “the enormity of the data” has in the past 
required a specialist vendor that creates software to analyze 
the massive settlement statements produced by the grid’s 


FIGURE 4.13 


XML is becoming increasingly popular as an open 
standard for sharing data across organizations. 


Source: © BananaStock/PictureQuest. 
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Power Distribution and Law 
Enforcement: Reaping the Benefits 
of Sharing Data through XML 


manager, the California Independent System Operator. 
NCPA sought these vendor bids three years ago and received 
quotes that were “several hundred thousand dollars a year in 
licensing fees and ongoing maintenance,” remarks Carac- 
risti. The need for services from these customized systems 
adds to the cost of power consumption for every California 
consumer. 

Faced with such a large annual expense, NCPA sought 
instead to develop the in-house expertise to deal with the 
statements. Senior programmer analyst Carlo Tiu and his 
team at NCPA used Oracle’s XML-handling capabilities to 
develop a schema to handle the data and a configuration file 
that contained the rules for determining supplier payment 
from the data. That file can be regularly updated, without 
needing to modify the XML data themselves. In doing so, 
the NCPA gained a step on the rest of the industry, as the 
California Independent System Operator started requiring 
all of its vendors to provide power distribution and billing 
data as XML files. NCPA has already tested its ability to 
process XML settlement statements automatically and has 
scaled out its Oracle system to 10 times its needs “without 
seeing any bottlenecks,” says Tiu. 

Being able to process the Independent System Operator 
statements automatically will represent huge cost savings to 
NCPA, according to IS manager Tom Breckon. “When set- 
tlement statements come in,” Breckon says, “NCPA has 
eight working days to determine where mistakes may have 
been made. If we fail to get back to [the California Inde- 
pendent System Operator], we lose our chance to reclaim 
the monies from corrections.” Yet, he acknowledges, “we 
can’t inspect that volume of data on a manual basis.” 

Gaining the expertise to deal with settlements as XML 
data over the past three years has cost NCPA the equivalent 
of one year’s expense of a manager’s salary. Meanwhile, 
NCPA has positioned itself to become its own statement 
processor and analyzer, submit disputes to the California In- 
dependent System Operator for corrections, and collect 
more of those corrected payments for members on a timely 
basis. “In my opinion,” says Breckon, “everybody will be do- 
ing it this way five years from now. It would reduce costs for 
all rate payers.” 

In the state of Ohio, almost 1,000 police departments 
have found critical new crime-fighting tools by gaining ac- 
cess to the digital records kept by neighboring law enforce- 
ment agencies. The Ohio Law Enforcement Gateway Search 
Engine is an Internet-based tool that can securely comb 
through numerous crime databases using a single log-in and 
query, making it easier to use than separate crime databases. 
For police officers, searching for information on a suspect or 
a rash of crimes used to require manually logging into sev- 
eral separate crime databases, which could take hours. Now, 
officers in even the smallest communities can log in just once 
and quickly gain access to criminal information. 
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The project, which began in 2003, faced a major hurdle: 
finding a way to get the disparate crime information systems to 
interoperate with each other. “Everybody wants to share, but 
nobody wants to use the same product,” says Chief Gary Vest 
of the Powell, Ohio, Police Department, near Columbus. In a 
major metropolitan area in Ohio, there can be 30 different po- 
lice departments, each using different products that aren’t 
linked, he says. “That made it difficult for local departments to 
link suspects and crimes in neighboring jurisdictions.” 

‘To make the systems compatible, crime records manage- 
ment vendors rewrote their software so that data from par- 
ticipating departments could be converted into the gateway 
format for easier data sharing. The vendors used a special 
object-oriented Global Justice XML Data Model and inter- 
operability standards developed by the U.S. Department of 
Justice for such purposes. What makes this project different 
from other fledgling police interoperability programs in the 
United States is that it’s a standards-based system. “You don’t 
have to throw out your vendor to play,” notes Vest. 

So far, Ohio police can’t search on criminal “M.O.’s,” 
but that capability is being worked on. By combing local po- 
lice records, officers can search for a suspect’s name even 
before it’s in the national databases or other larger data re- 
positories, says Vest. “You’re a step earlier.” Other regional 
police interoperability projects are in progress around the 
nation, but this is believed to be the first statewide effort. 

In San Diego County, police agencies have been sharing 
crime data for 25 years using a custom program called the Au- 
tomated Regional Justice Information System (ARJIS). Bar- 
bara Montgomery, project manager for ARJIS, says it differs 
from the Ohio initiative because it is mainframe-based and all 
police agencies have to use the same software to access infor- 
mation. Such data-sharing programs are not widespread in the 
United States because of their cost, especially for smaller po- 
lice departments, she says. In fact, ARJIS was made possible 
only after a number of departments pooled their money. 


CASE STUDY QUESTIONS 


1. What is the business value of XML to the organizations 
described in the case? How are they able to achieve 
such large returns on investment? 


2. What are other ways in which XML could be used by 
organizations to create value and share data? Look for 
examples involving for-profit organizations to gain a 
more complete perspective on the issue. 


3. What seem to be important elements in the success of 
projects relying on extensive use of XML across organi- 
zations, and why? Research the concept of metadata to 
inform your answer. 


“No single police department could afford to buy 
[the hardware and the skills of] a bunch of computer pro- 
grammers so it was truly a ‘united we stand, divided we fall’ 
approach,” Montgomery says. “The next generation of 
ARJIS is being planned now, with the system likely to evolve 
over the next few years from its mainframe roots to a server- 
based enterprise architecture for more flexibility,” says 
Montgomery. 

Along the same lines, the Florida Department of Law 
Enforcement will begin work on a $15 million project to in- 
tegrate the back-end systems of 500 law enforcement organ- 
izations across the state. In many cases, investigators in 
Florida law enforcement offices now gather information 
from other departments in the state via telephone or e-mail. 
The Florida Law Enforcement Exchange project promises 
to provide access to statewide law enforcement data with a 
single query, says state’s CIO Brenda Owens, whose IT unit 
is overseeing the project. 

“Our goal is to provide seamless access to data across the 
state,” says Owens. “An operator sitting at a PC in a police 
department doesn’t know or care what the data look like; 
they can put the inquiry in and get the information back.” 

Large integration projects such as this often derail be- 
cause it’s difficult to get different groups to agree on meta- 
data types. “The metadata management or understanding 
the common elements is a huge part of [an integration 
project],” notes Ken Vollmer, an analyst at Forrester 
Research. “Trying to combine information from two 
agencies—that is hard enough. In Florida, you’re talking 
500 agencies, and they have to have some software to help 
them determine what the common data elements are.” 


Source: Adapted from Charles Babcok, “Electricity Costs Attacked through 
XML,” InformationWeek, December 26, 2007; Todd Weiss, “Ohio Police 
Use Specialized Software to Track Data (and Bad Guys),” Computerworld, 
June 23, 2006; and Heather Havenstein, “Florida Begins Linking Its Law 
Enforcement Agencies,” Computerworld, February 13, 2006. 


REAL WORLD ACTIVITIES 


1. XBRL stands for eXtensible Business Reporting 
Language, and it is one of the family of XML languages 
that is becoming standard for business communication 
across companies. Among other uses, the Securities 
and Exchange Commission has run a voluntary XBRL 
filing program since 2005. Go online and research the 
current status of XBRL implementation and adoption, 
including examples of companies that are already 
using it for business purposes. Prepare a report to 
share your findings. 


2. Investigate other large-scale, systemwide implementa- 
tions of XML such as the one described in the case 
involving the California Independent System Operator. 
Prepare a presentation with the proposed or realized 
costs and benefits of those efforts and share your 
findings with the class. 


FIGURE 4.14 


The system and application 
software interface between 
end users and computer 
hardware. 


FIGURE 4.15 


The basic functions of an 
operating system include 
a user interface, resource 
management, task 
management, file 
management, and utilities 
and other functions. 
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Resource Management. An operating system uses a variety of resource manage- 
ment programs to manage the hardware and networking resources of a computer sys- 
tem, including its CPU, memory, secondary storage devices, telecommunications 
processors, and input/output peripherals. For example, memory management pro- 
grams keep track of where data and programs are stored. They may also subdivide 
memory into a number of sections and swap parts of programs and data between 
memory and magnetic disks or other secondary storage devices. This process can pro- 
vide a computer system with a virtual memory capability that is significantly larger 
than the real memory capacity of its primary storage circuits. So, a computer with a 
virtual memory capability can process large programs and greater amounts of data 
than the capacity of its memory chips would normally allow. 


File Management. An operating system contains file management programs that 
control the creation, deletion, and access of files of data and programs. File manage- 
ment also involves keeping track of the physical location of files on magnetic disks and 
other secondary storage devices. So operating systems maintain directories of infor- 
mation about the location and characteristics of files stored on a computer system’s 
secondary storage devices. 


End User/System 
and Network 
Communications 


Resource Task we Gile Utilities 
Managing Managing the Managing Providing 

the Use of Accomplishment Data and a Variety of 
Hardware of Tasks Program Files Support Services 


Resources 
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Microsoft Windows 


Task Management. The task management programs of an operating system help 
accomplish the computing tasks of end users. The programs control which task gets 
access to the CPU and for how much time. The task management functions can allo- 
cate a specific slice of CPU time to a particular task and interrupt the CPU at any time 
to substitute a higher priority task. Several different approaches to task management 
may be taken, each with advantages in certain situations. 

Multitasking (sometimes referred to as multiprogramming or time-sharing) is a task 
management approach that allows for several computing tasks to be performed in a 
seemingly simultaneous fashion. In reality, multitasking assigns only one task at a time 
to the CPU, but it switches from one program to another so quickly that it gives the 
appearance of executing all of the programs at the same time. There are two basic 
types of multitasking: preemptive and cooperative. In preemptive multitasking, the task 
management functions parcel out CPU time slices to each program. In contrast, coop- 
erative multitasking allows each program to control the CPU for as long as it needs it. 
If a program is not using the CPU, however, it can allow another program to use it 
temporarily. Most Windows and UNIX-based operating systems use the preemptive 
approach, whereas most Macintosh-style platforms use cooperative multitasking. Al- 
though the terms multitasking and multiprocessing are often used interchangeably, they 
are actually different concepts based on the number of CPUs being used. In multi- 
processing, more than one CPU is being accessed, but in multitasking, only one CPU 
is in operation. 

Most computers make use of some sort of multitasking. On modern microcomput- 
ers, multitasking is made possible by the development of powerful processors and their 
ability to address much larger memory capacities directly. This capability allows 
primary storage to be subdivided into several large partitions, each of which is used by 
a different software application. 

In effect, a single computer can act as if it were several computers, or virtual 
machines, because each application program runs independently at the same time. The 
number of programs that can be run concurrently depends on the amount of memory 
that is available and the amount of processing each job demands. That’s because a 
microprocessor (or CPU) can become overloaded with too many jobs and provide 
unacceptably slow response times. However, if memory and processing capacities are 
adequate, multitasking allows end users to switch easily from one application to an- 
other, share data files among applications, and process some applications in a back- 
ground mode. Typically, background tasks include large printing jobs, extensive 
mathematical computations, or unattended telecommunications sessions. 


For many years, MS-DOS (Microsoft Disk Operating System) was the most widely 
used microcomputer operating system. It is a single-user, single-tasking operating sys- 
tem but was given a graphical user interface and limited multitasking capabilities by 
combining it with Microsoft Windows. Microsoft began replacing its DOS/Windows 
combination in 1995 with the Windows 95 operating system, featuring a graphical 
user interface, true multitasking, networking, multimedia, and many other capabili- 
ties. Microsoft introduced an enhanced Windows 98 version during 1998, and a 
Windows Me (Millennium Edition) consumer PC system in 2000. 

Microsoft introduced its Windows NT (New Technology) operating system in 
1995. Windows NT is a powerful, multitasking, multiuser operating system that was 
installed on many network servers to manage PCs with high-performance computing 
requirements. New Server and Workstation versions were introduced in 1997. Micro- 
soft substantially enhanced its Windows NT products with the Windows 2000 oper- 
ating system during the year 2000. 

Late in 2001, Microsoft introduced Windows XP Home Edition and Professional 
versions, and thus formally merged its two Windows operating system lines for con- 
sumer and business users, uniting them around the Windows NT and Windows 2000 
code base. With Windows XP, consumers and home users finally received an enhanced 


Chapter 4 / Computer Software @ 145 


FIGURE 4.16 Comparing the purposes of the four versions of the Microsoft Windows Server 2008 operating system. 


Microsoft Windows Server 2008 Comparisons 


Windows Server 2008, Standard Edition 

For smaller server applications, including file and print sharing, Internet and intranet connectivity, and centralized 
desktop application deployment. 

Windows Server 2008, Enterprise Edition 

For larger business applications, XML Web services, enterprise collaboration, and enterprise network support. 


Windows Server 2008, Datacenter Edition 
For business-critical and mission-critical applications demanding the highest levels of scalability and availability. 


Windows Server 2008, Web Edition 
For Web serving and hosting, providing a platform for developing and deploying Web services and applications. 


Windows operating system with the performance and stability features that business 
users had in Windows 2000 and continue to have in Windows XP Professional. 
Microsoft also introduced four new Windows Server 2003 versions in 2008, which 
are summarized and compared in Figure 4.16. 

In 2006, Microsoft released their newest operating system called Vista. Vista con- 
tains hundreds of new features; some of the most significant include an updated graphi- 
cal user interface and visual style dubbed Windows Aero, improved search features, new 
multimedia creation tools such as Windows DVD Maker, and completely redesigned 
networking, audio, print, and display subsystems. Vista also aims to increase the level of 
communication between machines on a home network using peer-to-peer technology, 
making it easier to share files and digital media between computers and devices. 

For developers, Vista introduced version 3.0 of the .NET Framework, which aims 
to make it significantly easier for developers to write high-quality applications than 
with the previous versions of Windows. 

Microsoft’s primary stated objective with Vista, however, has been to improve the 
state of security in the Windows operating system. One of the most common criti- 
cisms of Windows XP and its predecessors has been their commonly exploited secu- 
rity vulnerabilities and overall susceptibility to malware, viruses, and buffer overflows. 
In light of these complaints, then-Microsoft chairman Bill Gates announced in early 
2002 a companywide “Trustworthy Computing Initiative” to incorporate security 
work into every aspect of software development at the company. Microsoft claimed 
that it prioritized improving the security of Windows XP and Windows Server 2003 
rather than finishing Windows Vista, significantly delaying its completion. 

During 2008, a new server product, entitled (appropriately enough) Windows Server 
2008, has emerged. Windows Server 2008 is built from the same code base as Windows 
Vista; therefore, it shares much of the same architecture and functionality. Since the 
code base is common, it automatically comes with most of the technical, security, man- 
agement, and administrative features new to Windows Vista such as the rewritten net- 
working processes (native [Pv6, native wireless, speed, and security improvements); 
improved image-based installation, deployment, and recovery; improved diagnostics, 
monitoring, event logging, and reporting tools; new security features; improved Win- 
dows Firewall with secure default configuration; .NET Framework 3.0 technologies; 
and the core kernel, memory and file system improvements. Processors and memory 
devices are modeled as Plug and Play devices, to allow hot-plugging of these devices. 

Windows Server 2008 is already in release 2 as several performance and security 
enhancements required a major upgrade. 


UNIX Originally developed by AT&T, UNIX now is also offered by other vendors, includ- 


ing Solaris by Sun Microsystems and AIX by IBM. UNIX is a multitasking, multiuser, 
network-managing operating system whose portability allows it to run on mainframes, 
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Linux 


Open-Source 


Software 


midrange computers, and microcomputers. UNIX is still a popular choice for Web 
and other network servers. 


Linux is a low-cost, powerful, and reliable UNIX-like operating system that is rapidly 
gaining market share from UNIX and Windows servers as a high-performance oper- 
ating system for network servers and Web servers in both small and large networks. 
Linux was developed as free or low-cost shareware or open-source software over the 
Internet in the 1990s by Linus Torvald of Finland and millions of programmers around 
the world. Linux is still being enhanced in this way but is sold with extra features and 
support services by software vendors such as Red Hat, Caldera, and SUSE Linux. PC 
versions, which support office software suites, Web browsers, and other application 
software, are also available. 


The concept of open-source software (OSS) is growing far beyond the Linux oper- 
ating system. The basic idea behind open source is very simple: When programmers 
can read, redistribute, and modify the source code for a piece of software, the software 
evolves. People improve it, people adapt it, people fix bugs. This development can 
happen at a speed that, if one is accustomed to the slow pace of conventional software 
development, seems astonishing. The open-source community of software developers 
has learned that this rapid evolutionary process produces better software than the tra- 
ditional commercial (closed) model, in which only a very few programmers can see the 
source. The concept of open source, admittedly, runs counter to the highly commercial 
(and proprietary) world of traditional software development. Nonetheless, an increas- 
ingly large number of developers have embraced the open-source concept and come to 
realize that the proprietary approach to software development has hidden costs that can 
often outweigh its benefits. 

Since 1998, the OSS movement has become a revolution in software develop- 
ment. This revolution, however, can actually trace its roots back more than 30 years. 
Typically, in the PC era, computer software had been sold only as a finished product, 
otherwise called a precompiled binary, which is installed on a user’s computer by copy- 
ing files to appropriate directories or folders. Moving to a new computer platform 
(Windows to Macintosh, for example) usually required the purchase of a new license. 
If the company went out of business or discontinued support of a product, users of 
that product had no recourse. Bug fixes were completely dependent on the organiza- 
tion that sold the software. In contrast, OSS is software that is licensed to guarantee 
free access to the programming behind the precompiled binary, otherwise called the 
source code. This access allows the user to install the software on a new platform with- 
out an additional purchase and to get support (or create a support consortium with 
other like-minded users) for a product whose creator no longer supports it. Those 
who are technically inclined can fix bugs themselves rather than waiting for someone 
else to do so. Generally, there is a central distribution mechanism that allows users to 
obtain the source code, as well as precompiled binaries in some cases. There are also 
mechanisms by which users may pay a fee to obtain the software, such as on a CD- 
ROM or DVD, which may also include some technical support. A variety of licenses 
are used to ensure that the source code will remain available, wherever the code is 
actually used. 

To be clear, there are several things open source is not: It is not shareware, public- 
domain software, freeware, or software viewers and readers made freely available with- 
out access to source code. Shareware, whether or not the user registers it and pays the 
registration fee, typically allows no access to the underlying source code. Unlike free- 
ware and public-domain software, OSS is copyrighted and distributed with license 
terms designed to ensure that the source code will always be available. While a fee may 
be charged for the software’s packaging, distribution, or support, the complete package 
needed to create files is included, not simply a portion needed to view files created 
elsewhere. 


OpenOffice.org 3 


Mac OS X 
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The philosophy of open source is based on a variety of models that sometimes 
conflict; indeed, it often seems there are as many philosophies and models for 
developing and managing OSS as there are major products. In 1998, a small group 
of open-source enthusiasts decided it was time to formalize some things about 
open source. The newly formed group registered themselves on the Internet as 
www.open-source.org and began the process of defining exactly what is, and what is 
not, open-source software. As it stands today, open-source licensing is defined by 
the following characteristics: 


e The license shall not restrict any party from selling or giving away the software 
as a component of an aggregate software distribution containing programs from 
several different sources. 


e The program must include source code and must allow distribution in source 
code, as well as compiled form. 


e The license must allow modifications and derived works and must allow them to 
be distributed under the same terms as the license of the original software. 


e The license may restrict source code from being distributed in modified form 
only if the license allows the distribution of patch files with the source code for 
the purpose of modifying the program at build time. 


e The license must not discriminate against any person or group of persons. 


e The license must not restrict anyone from making use of the program in a spe- 
cific field of endeavor. 


e The rights attached to the program must apply to all to whom the program is re- 
distributed without the need for execution of an additional license by those parties. 


e The license must not be specific to a product. 


e The license must not contaminate other software by placing restrictions on any 
software distributed along with the licensed software. 


This radical approach to software development and distribution is not without its 
detractors—most notably Microsoft. Nonetheless, the open-source movement is 
flourishing and stands to continue to revolutionize the way we think about software 
development. 


A relative newcomer to the open-source arena is an entire office suite offered by Sun 
Microsystems called OpenOffice.org 3. This product, built under the open-source 
standards described above, is a complete integrated office suite that provides all the 
common applications including word processing, spreadsheet, presentation graphics, 
and database management. It can store and retrieve files in a wide variety of data 
formats, including all of the file formats associated with the other major office suite 
applications on the market. 

Best of all, OpenOffice.org 3 can be downloaded and used entirely free of any license 
fees. OpenOffice.org 3 is released under the LGPL license. This means you may use it 
for any purpose: domestic, commercial, educational, or public administration. You 
may install it on as many computers as you like, and you may make copies and give 
them away to family, friends, students, employees—anyone you like. 


Actually based on a form of UNIX, the Mac OS X (pronounced MAC OS 10) is the 
latest operating system from Apple for the iMac and other Macintosh microcomputers. 
‘The Mac OS X version 10.2 Jaguar has an advanced graphical user interface and multi- 
tasking and multimedia capabilities, along with an integrated Web browser, e-mail, 
instant messaging, search engine, digital media player, and many other features. 

Mac OS X was a radical departure from previous Macintosh operating systems; its 
underlying code base is completely different from previous versions. Its core, named 
Darwin, is an open source, UNIX-like operating system. Apple layered over Darwin a 
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number of proprietary components, including the Aqua interface and the Finder, to 
complete the GUI-based operating system that is Mac OS X. 

Mac OS X also included a number of features intended to make the operating system 
more stable and reliable than Apple’s previous operating systems. Preemptive multitask- 
ing and memory protection, for example, improved the ability of the operating system 
to run multiple applications simultaneously that don’t interrupt or corrupt each other. 

The most visible change was the Aqua theme. The use of soft edges, translucent 
colors, and pinstripes—similar to the hardware design of the first iMacs—brought 
more texture and color to the interface than OS 9’s “Platinum” appearance had of- 
fered. Numerous users of the older versions of the operating system decried the new 
look as “cutesy” and lacking in professional polish. However, Aqua also has been called 
a bold and innovative step forward at a time when user interfaces were seen as “dull 
and boring.” Despite the controversy, the look was instantly recognizable, and even 
before the first version of Mac OS X was released, third-party developers started pro- 
ducing skins (look and feel colors and styles for application interfaces) for customiza- 
ble applications that mimicked the Aqua appearance. 

Mac OS X also includes its own software development tools, most prominently an 
integrated development environment called Xcode. Xcode provides interfaces to com- 
pilers that support several programming languages including C, C+ +, Objective-C, 
and Java. For the Apple Intel Transition, it was modified so that developers could eas- 


ily create an operating system to remain compatible with both the Intel-based and 
PowerPC-based Macintosh. 


Consider all of the various types of software applications we discussed in the first sec- 
tion of this chapter along with the multiple operating systems we just discussed. What 
happens when a user who has a machine running Windows needs to run an application 
designed specifically for a machine running Mac OS X? The answer used to be “Bor- 
row someone’s Mac.” Through the development of application virtualization, a much 
more useful and productive answer exists. Application virtualization is an umbrella term 
that describes software technologies that improve portability, manageability, and com- 
patibility of applications by insulating them from the underlying operating system on 
which they are executed. A fully virtualized application is not installed in the traditional 
sense; it is just executed as if it is. The application is fooled into believing that it is di- 
rectly interfacing with the original operating system and all the resources managed by 
it, when in reality it is not. Application virtualization is just an extension of operating 
system virtualization where the same basic concepts fool the whole operating system 
into thinking it is running on a particular type of hardware when it is, in fact, not. 

The concept of virtualization is not a recent development. The use of a virtual 
machine was a common practice during the mainframe era where extremely large ma- 
chines were partitioned into smaller, separate virtual machines or domains to allow 
multiple users to run unique sets of applications and processes simultaneously. Each 
user constituency used a portion of the total available machine resources and the vir- 
tualization approach made it appear that each domain was an entirely separate ma- 
chine from all the rest. If you have ever set up a new PC and created a partition on the 
hard drive, you have taken advantage of virtualization. You have taken one physical 
drive and created two virtual drives—one for each partition. 

Application virtualization is a logical next step from these early roots. The benefits 
to the enterprise range from the cost savings associated with not having to have mul- 
tiple platforms for multiple applications, to the energy savings associated with not 
having a multitude of servers running at low capacity while eating up electricity and 
generating heat. 

A thorough discussion of virtualization is well beyond the scope of this text but suf- 
fice to say it is rapidly blurring the boundaries between machines and operating systems 
and operating systems and applications. Add this to the cloud computing concept and 
we have the makings of an anytime, anywhere, any machine, any application world. 
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The fact that Linux is an international phenomenon isn’t too surprising, since the 
kernel was invented by Finnish student Linus Torvalds at the University of Helsinki. 
What began as a modest programming effort—just a hobby, Torvalds once said—has 
grown beyond the stage of a few maverick users thumbing their noses at Microsoft. 
In Asia, for example, shipments of Linux server licenses grew by 36 percent in 2004, 
while shipments of client licenses rose 49 percent. 

Some of the deployments are quite substantial: The Industrial and Commercial 
Bank of China plans to use Linux for all front-end banking operations, Banca Popo- 
lare di Milano in Italy is rolling out 4,500 Linux desktops, and LVM Insurance in 
Germany has Linux on 7,700 desktops and 30 servers, for example. 

The reasons for Linux deployments vary, but increasingly they’re based less on 
zealotry and more on practicalities. Much of this demand is coming from China, 
where the government has backed Linux as an alternative to Microsoft’s continued 
dominance of the operating system market. Government support isn’t the only reason 
a growing number of Chinese companies are using Linux. Practical business demands 
are playing a role too, particularly in the country’s financial industry. In April 2005, 
the Industrial and Commercial Bank of China (ICBC), the country’s largest bank, an- 
nounced plans to deploy Turbolinux Inc.’s Turbolinux 7 DataServer operating system 
for all of its front-end banking operations over a three-year period. 

In 2003, MercadoLibre.com SA, a Buenos Aires—based online marketplace with 
operations in multiple countries in the region, outgrew its server infrastructure, 
which was made up entirely of Sun Microsystems Inc. boxes running Solaris. It opted 
to migrate to HP Itanium machines running a Linux operating system from Red 
Hat, instead of adding Sun servers to its existing setup. “With a single shot, we had 
to solve three issues: availability, scalability, and performance. And we had to do it at 
a low cost,” says Edgardo Sokolowicz, chief technology officer. 

An IT executive in Europe says he made the switch to save money on hardware: 
“Linux in and of itself as an operating system was not the driver. The fact is, Linux 
enabled us to use a commodity platform. There’s nothing we wouldn’t run on it.” 
Private corporations and public-sector users in Europe typically cite pragmatic 
reasons for taking up the open-source operating system. They point to price and 
performance benefits. They want freedom to swap out hardware. They find the 
operating system reliable. They like its flexibility. 

“Tt was not that we just wanted to do open-source. We had to find a way to pro- 
tect our investment in network computing,” says Matthias Strelow, a technical 
project manager at LVM Insurance in Munster, Germany. “I’m not sure it would 
have been possible with any other operating system.” 


Source: Adapted from Juan Perez, “Global Linux: Latin America,” Computerworld, July 18, 2005; Carol Sliwa, 
“Europe: Financial Services Companies Lead the Charge to Linux,” Computerworld, July 18, 2005; and Sumner 
Lemon and Dan Nystedt, “Global Linux: Asia,” Computerworld, July 18, 2005. 


There are many other types of important system management software besides operat- 
ing systems. These include database management systems, which we will cover in Chapter 5, 
and network management programs, which we will cover in Chapter 6. Figure 4.17 
compares several types of system software offered by IBM and its competitors. 

Several other types of system management software are marketed as separate 
programs or included as part of an operating system. Utility programs, or utilities, 
are an important example. Programs like Norton Utilities perform miscellaneous 
housekeeping and file conversion functions. Examples include data backup, data 
recovery, virus protection, data compression, and file defragmentation. Most operating 
systems also provide many utilities that perform a variety of helpful chores for 
computer users. 
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FIGURE 4.17 Comparing system software offered by IBM and its main competitors. 


Software Main 

Category What It Does IBM Product Customers Competitor Customers 

Network Monitors networks Tivoli T. Rowe Price uses HP Amazon.com uses 

management | to keep them up and it to safeguard OpenView it to monitor its 
running. customer records. servers. 

Application Shuttles data between | WebSphere REI uses it to serve BEA Washingtonpost.com 

server business apps and up its Web site and WebLogic builds news pages 
the Web. distribute data. with it. 

Database Provides digital DB2 Mikasa uses it to Oracle 11g It runs Southwest 

manager storehouses for help customers find Airlines’ frequent- 
business data. its products online. flyer program. 

Collaboration | Powers everything Lotus Retailer Sephora Microsoft Time Inc. uses it to 

tools from e-mail to uses it to coordinate | Exchange provide e-mail to its 
electronic calendars. store maintenance. employees. 

Development | Allows programmers | Rational Merrill Lynch used Microsoft Used to develop 

tools to craft software it to build code for Visual Studio | management system. 
code quickly. online trading. .NET 

Other examples of system support programs include performance monitors and 
security monitors. Performance monitors are programs that monitor and adjust the 
performance and usage of one or more computer systems to keep them running effi- 
ciently. Security monitors are packages that monitor and control the use of computer 
systems and provide warning messages and record evidence of unauthorized use of 
computer resources. A recent trend is to merge both types of programs into operating 
systems like Microsofts Windows 2008 Datacenter Server or into system manage- 
ment software like Computer Associates’ CA-Unicenter, which can manage both 
mainframe systems and servers in a data center. 

Another important software trend is the use of system software known as applica- 
tion servers, which provide a middleware interface between an operating system and 
the application programs of users. Middleware is software that helps diverse software 
applications and networked computer systems exchange data and work together more 
efficiently. Examples include application servers, Web servers, and enterprise applica- 
tion integration (EAI) software. Thus, for example, application servers like BEA’s 
WebLogic and IBM’s WebSphere help Web-based e-business and e-commerce 
applications run much faster and more efficiently on computers using Windows, 
UNIX, and other operating systems. 

P rogramm in g To understand computer software, you need a basic knowledge of the role that pro- 

Lan guages gramming languages play in the development of computer programs. A programming 
language allows a programmer to develop the sets of instructions that constitute a 
computer program. Many different programming languages have been developed, 
each with its own unique vocabulary, grammar, and uses. 

Machine Languages Machine languages (or first-generation languages) are the most basic level of program- 


ming languages. In the early stages of computer development, all program instruc- 
tions had to be written using binary codes unique to each computer. This type of 
programming involves the difficult task of writing instructions in the form of strings 
of binary digits (ones and zeros) or other number systems. Programmers must have a 
detailed knowledge of the internal operations of the specific type of CPU they are us- 
ing. They must write long series of detailed instructions to accomplish even simple 
processing tasks. Programming in machine language requires specifying the storage 
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Four Levels of Programming Languages 


e Machine Languages: e High-Level Languages: 
Use binary coded instructions Use brief statements or arithmetic 
1010 11001 notations 
1011 11010 BASIC: X = Y + Z 
1100 11011 COBOL: COMPUTEX = Y + Z 
e Assembler Languages: © Fourth-Generation Languages: 
Use symbolic coded instructions Use natural and nonprocedural 
LOD Y statements 
ADD Z SUM THE FOLLOWING 
STRX NUMBERS 


locations for every instruction and item of data used. Instructions must be included for 
every switch and indicator used by the program. These requirements make machine 
language programming a difficult and error-prone task. A machine language program 
to add two numbers together in the CPU of a specific computer and store the result 
might take the form shown in Figure 4.18. 


Assembler languages (or second-generation languages) are the next level of programming 
languages. They were developed to reduce the difficulties in writing machine language 
programs. The use of assembler languages requires language translator programs called 
assemblers that allow a computer to convert the instructions of such language into ma- 
chine instructions. Assembler languages are frequently called symbolic languages be- 
cause symbols are used to represent operation codes and storage locations. Convenient 
alphabetic abbreviations called mnemonics (memory aids) and other symbols represent 
operation codes, storage locations, and data elements. For example, the computation 
X = Y + Zin an assembler language might take the form shown in Figure 4.18. 

Assembler languages are still used as a method of programming a computer in a 
machine-oriented language. Most computer manufacturers provide an assembler lan- 
guage that reflects the unique machine language instruction set of a particular line of 
computers. This feature is particularly desirable to system programmers, who program 
system software (as opposed to application programmers, who program application 
software), because it provides them with greater control and flexibility in designing a 
program for a particular computer. They can then produce more efficient software— 
that is, programs that require a minimum of instructions, storage, and CPU time to 
perform a specific processing assignment. 


High-level languages (or third-generation languages) use instructions, which are called 
statements, that include brief statements or arithmetic expressions. Individual high- 
level language statements are actually acroinstructions; that is, each individual state- 
ment generates several machine instructions when translated into machine language 
by high-level language translator programs called compilers or interpreters. High-level 
language statements resemble the phrases or mathematical expressions required to 
express the problem or procedure being programmed. The syntax (vocabulary, punc- 
tuation, and grammatical rules) and semantics (meanings) of such statements do not 
reflect the internal code of any particular computer. For example, the computation 
X = Y + Z would be programmed in the high-level languages of BASIC and COBOL 
as shown in Figure 4.18. 

High-level languages like BASIC, COBOL, and FORTRAN are easier to learn and 
program than an assembler language because they have less rigid rules, forms, and syn- 
taxes. However, high-level language programs are usually less efficient than assembler 
language programs and require a greater amount of computer time for translation into 
machine instructions. Because most high-level languages are machine-independent, 
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programs written in a high-level language do not have to be reprogrammed when a 
new computer is installed, and programmers do not have to learn a different language 
for each type of computer. 


The term fourth-generation language describes a variety of programming languages 
that are more nonprocedural and conversational than prior languages. These languages 
are called fourth-generation languages (4GLs) to differentiate them from machine 
languages (first generation), assembler languages (second generation), and high-level 
languages (third generation). 

Most fourth-generation languages are nonprocedural languages that encourage users 
and programmers to specify the results they want, while the computer determines the 
sequence of instructions that will accomplish those results. Thus, fourth-generation 
languages have helped simplify the programming process. Natural languages are 
sometimes considered fifth-generation languages (5GLs) and are very close to English 
or other human languages. Research and development activity in artificial intelligence 
(AD) is developing programming languages that are as easy to use as ordinary conversa- 
tion in one’s native tongue. For example, INTELLECT, a natural language, would 
use a statement like, “What are the average exam scores in MIS 200?” to program a 
simple average exam score task. 

In the early days of 4GLs, results suggested that high-volume transaction process- 
ing environments were not in the range of a 4GLs capabilities. Although 4GLs were 
characterized by their ease of use, they were also viewed as less flexible than their 
predecessors, primarily due to their increased storage and processing speed require- 
ments. In today’s large data volume environment, 4GLs are widely used and no longer 
viewed as a trade-off between ease of use and flexibility. 


‘Twenty years ago, software engineer Fred Brooks famously observed that there was 
no silver bullet that could slay “the monster of missed schedules, blown budgets and 
flawed products.” Today, the creation of software might seem as expensive, trouble- 
prone, and difficult as ever. And yet progress is being made. While there is still 
no silver bullet in sight, an array of new techniques promises to further boost a 
programmer’s productivity, at least in some application domains. 

‘The techniques span a broad spectrum of methods and results, but all are aimed 
at generating software automatically. Typically, they generate code from high-level, 
machine-readable designs or from domain-specific languages—assisted by advanced 
compilers—that sometimes can be used by nonprogrammers. 

Gordon Novak, a computer science professor at the University of Texas at Austin 
and a member of the school’s Laboratory for Artificial Intelligence, is working on 
“automatic programming”—using libraries of generic versions of programs, such as 
algorithms—to sort or find items in a list. But unlike traditional subroutines, which 
have simple but rigid interfaces and are invoked by other lines of program code, his 
technique works at a higher level and is therefore more flexible and easier to use. 

Novak's users construct “views” that describe application data and principles and 
then connect the views by arrows in diagrams that show the relationships among the 
data. ‘The diagrams are, in essence, very high-level flowcharts of the desired program. 
They get compiled in a way that customizes the stored generic algorithms for the user’s 
specific problem, and the result is ordinary source code such as C, C+ +, or Java. 

Novak says he was able to generate 250 lines of source code for an indexing 
program in 90 seconds with his system. That’s equivalent to a week of productivity 
for an average programmer using a traditional language. “You are describing your 
program at a higher level,” he says. “And what my program is saying is, ‘I can tailor 
the algorithm for your application for free.’” 
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Douglas Smith, principal scientist at Kestrel Institute, a nonprofit computer science 
research firm in Palo Alto, California, is developing tools to “automate knowledge and 
get it into the computer.” A programmer starts with Kestrel’s Specware, which is a 
general-purpose, fifth-generation language that specifies a program’s functions without 
regard to the ultimate programming language, system architecture, algorithms, data 
structures, and so on. Specware draws on a library of components, but the components 
aren't code. They are at a higher level and include design knowledge and principles 
about algorithms, data structures, and so on. Smith calls them “abstract templates.” 

In addition, Specware can produce proofs that the working code is “correct”— 
that is, that it conforms to the requirements put in by the user (which, of course, may 
contain errors). “Some customers want that for very-high-assurance applications, 
with no security flaws,” Smith says. Kestrel does work for NASA and U.S. military 
and security agencies. 

“It’s a language for writing down problem requirements, a high-level statement of 
what a solution should be, without saying how to solve the problem,” Smith says. “We 
think it’s the ultimate frontier in software engineering. It’s what systems analysts do.” 


Source: Adapted from Gary Anthes, “In the Labs: Automatic Code Generators,” Computerworld, March 20, 2006. 


Object-oriented languages like Visual Basic, C++, and Java are also considered fifth- 
generation languages and have become major tools of software development. Briefly, 
whereas most programming languages separate data elements from the procedures or 
actions that will be performed on them, object-oriented languages tie them together 
into objects. Thus, an object consists of data and the actions that can be performed on 
the data. For example, an object could be a set of data about a bank customer’s savings 
account and the operations (e.g., interest calculations) that might be performed on the 
data. An object also could be data in graphic form, such as a video display window plus 
the display actions that might be used on it. See Figure 4.19. 

In procedural languages, a program consists of procedures to perform actions on 
each data element. However, in object-oriented systems, objects tell other objects to 
perform actions on themselves. For example, to open a window on a computer video 
display, a beginning menu object could send a window object a message to open, and 
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FIGURE 4.20 The Visual Basic object-oriented programming environment. 


Menu bar De Ot Be Beet font Oe Bn Gey Cope Ink biers uhim bb 


Toolbar B-o-" GO SCM »- en RHSZBRAD N 
i 


Toolbox 


Form 


PE 
Project 


Explorer 
window 


saedis 


sites 


Properties 


pa TE STEET g window 


Option Exphet 


Form Designer window Code window Form Layout window 


Source: Courtesy of Microsoft®. 


Web 
Languages 
and Services 


HTML 


a window would appear on the screen. That’s because the window object contains the 
program code for opening itself. 

Object-oriented languages are easier to use and more efficient for programming 
the graphics-oriented user interfaces required by many applications. Therefore, they 
are the most widely used programming languages for software development today. 
Also, once objects are programmed, they are reusable. Therefore, reusability of ob- 
jects is a major benefit of object-oriented programming. For example, programmers 
can construct a user interface for a new program by assembling standard objects such 
as windows, bars, boxes, buttons, and icons. Therefore, most object-oriented pro- 
gramming packages provide a GUI that supports a point-and-click, drag-and-drop 
visual assembly of objects known as visual programming. Figure 4.20 shows a display of 
the Visual Basic object-oriented programming environment. Object-oriented technol- 
ogy is discussed further in the coverage of object-oriented databases in Chapter 5. 


HTML, XML, and Java are three programming languages that are important tools for 
building multimedia Web pages, Web sites, and Web-based applications. In addition, 
XML and Java have become strategic components of the software technologies that 
support many Web services initiatives in business. 


HTML (Hypertext Markup Language) is a page description language that creates hy- 
pertext or hypermedia documents. HTML inserts control codes within a document at 
points you can specify that create links (hyperlinks) to other parts of the document or 
to other documents anywhere on the World Wide Web. HTML embeds control codes 
in the ASCII text of a document that designate titles, headings, graphics, and multi- 
media components, as well as hyperlinks within the document. 


XML 
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As we mentioned previously, several of the programs in the top software suites auto- 
matically convert documents into HTML formats. These include Web browsers, word 
processing and spreadsheet programs, database managers, and presentation graphics 
packages. These and other specialized Web publishing programs like Microsoft FrontPage, 
Lotus FastSite, and Macromedia’s DreamWeaver provide a range of features to help you 
design and create multimedia Web pages without formal HTML programming. 


XML (eXtensible Markup Language) is not a Web page format description language 
like HTML. Instead, XML describes the contents of Web pages (including business 
documents designed for use on the Web) by applying identifying tags or contextual 
labels to the data in Web documents. For example, a travel agency Web page with air- 
line names and flight times would use hidden XML tags like “airline name” and “flight 
time” to categorize each of the airline flight times on that page. Or product inventory 
data available at a Web site could be labeled with tags like “brand,” “price,” and “size.” 
By classifying data in this way, XML makes Web site information much more search- 
able, easier to sort, and easier to analyze. 

For example, XML-enabled search software could easily find the exact product 
you specify if the product data on the Web site had been labeled with identifying 
XML tags. A Web site that uses XML could also more easily determine which Web 
page features its customers use and which products they investigate. Thus, XML 
promises to make electronic business and commerce processes a lot easier and more 
efficient by supporting the automatic electronic exchange of business data between 
companies and their customers, suppliers, and other business partners. 

As mentioned at the beginning of the chapter, this entire textbook was revised and 
edited for the current edition using an XML-based application called PowerXEditor 
by Aptara. Let’s focus our attention on this unique application of XML intended to 
create efficiencies in the publishing industry. 


The publishing industry has experienced an upheaval in the past decade or so. The 
“long tail” of sales of existing books via Web sellers such as Amazon and the improve- 
ment in software and hardware technologies that can replicate the experience of read- 
ing a book or magazine means publishing houses are printing and selling fewer new 
books. As a result, many of these companies are venturing into digital publishing. 

“All the publishers are shifting from print to digital,” said Dev Ganesan, presi- 
dent and CEO of Aptara, which specializes in content transformation. “That’s a huge 
change. What that means for software companies is that they need to develop plat- 
forms for content creation that meet the needs of every customer. At the same time, 
customers are looking at publishing in terms of handling content in terms of authors, 
editors, and production employees. On top of that, they’re trying to automate parts 
of the production process. And companies must be willing to market products using 
traditional and new media to reach the widest possible audience. So there are a lot of 
challenges, but a lot of opportunities, too.” 

The upshot of all this is that learning professionals now can deliver content more 
flexibly and at a lower cost. They can make static content dynamic by taking a body 
of knowledge in print—such as a book—and converting it to a digital format. They 
can then chunk that content into smaller sizes and organize those nuggets of infor- 
mation according to learners’ needs. Moreover, they can get content published and 
distributed much more quickly via digital, online media. This is critical in an indus- 
try such as health care that faces rapid changes due to technological innovation and 
regulation, said another Aptara source. 

“Tn addition to the cost savings, they want to turn it around much faster,” he said. 
“Time to market is becoming paramount because there’s so much innovation going 
on. If they don’t have their print products out faster, they fall behind.” 
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A breakthrough product from Aptara is called PowerXEditor (PXE). An XML- 
based application, PXE allows a publisher to upload an existing book layout; edit or re- 
vise all elements of the book, including text look and feel, figures, tables, and other 
elements unique to that book; and output the book to a paging program that sets the 
book up for final printing. The important issue is that all of this is done in a digital for- 
mat instead of the previously common method of tear pages and cut and paste of figures 
and tables. Because the PXE content is XML-based, the application can be accessed via 
the Internet using any conventional Web browser. This means all of the contributors to 
a textbook can have access to the various chapters and elements no matter where they 
are. Add in the workflow management aspects of PXE, and all phases of the textbook 
revising, copyediting, and proofing processes can be handled with ease. 

Figure 4.21 shows a typical PXE screen. You might notice that it is in the process 
of editing the page you are currently reading. Figure 4.22 shows the XML code for 
the same page. 


Source: Adapted from Brian Summerfield, “Executive Briefings: Balancing Print and Digital Media,” Chief Learning 
Officer, March 2008. http://www.clomedia.com/includes/printcontent.php?aid=2 133 
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a to help you design and create multimedia Web pages without formal HIML programming. 
</p> 
<p elass="Head3" d="head3_19° BE p> 
<p dass="Para_FL"> 
<span dess="Def_term’ > 
<b>XML </> 
</span> 
(eXtensible Markup Language) is not a Web page format description language like HTML. Instead, XML 
describes the contents of Web pages (including business documents designed for use on the Web) by 
applying identifying tags or 
<i>contextual labels </> 
to the data in Web documents. For example, a travel agency Web page with airline names and flight 
times would use hidden XML tags like “airline name” and “flight time” to categorize each of the airline 
flight times on that page. Or product inventory data available at a Web site could be labeled with tags 
like “brand,” “price,” and “size.” By classifying data in this way, XML makes Web site information much 
more searchable, easier to sort, and easier to analyze. 


</p> 

«<p Cess~"Para_indented >For example, XML-enabled search software could easily find the exact product 
you specify if the product data on the Web site had been labeled with identilying XML tags. And a Web 
site that uses XML could more easily determine which Web page features its customers use and which 
products they investigate. Thus, XML promises to make electronic business and commerce processes a 
lot easier and more efficient by supporting the automatic electronic exchange of business data between 
companies and their customers, suppliers, and other business partners.« (o> 

<p diiis" Head3" \de"head3_: 20. >Java and NET </p> 

<p Cews="Para_FL "> 
<onon rias Nef term’ » 
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Java is an object-oriented programming language created by Sun Microsystems that 
is revolutionizing the programming of applications for the World Wide Web and 
corporate intranets and extranets. Java is related to the C++ and Objective C pro- 
gramming languages but is much simpler and more secure and is computing-platform 
independent. Java is also specifically designed for real-time, interactive, Web-based 
network applications. Java applications consisting of small application programs, 
called applets, can be executed by any computer and any operating system anywhere 
in a network. 

The ease of creating Java applets and distributing them from network servers to 
client PCs and network computers is one of the major reasons for Java’s popularity. 
Applets can be small, special-purpose application programs or small modules of larger 
Java application programs. Java programs are platform-independent, too—they can 
run on Windows, UNIX, and Macintosh systems without modification. 

Microsoft’s .NET is a collection of programming support for what are known as 
Web services, the ability to use the Web rather than your own computer for various 
services (see below). .NET is intended to provide individual and business users with a 
seamlessly interoperable and Web-enabled interface for applications and computing 
devices and to make computing activities increasingly Web browser-oriented. The 
.NET platform includes servers, building-block services such as Web-based data stor- 
age, and device software. It also includes Passport, Microsoft’s fill-in-the-form-only- 
once identity verification service. 

The .NET platform is expected to enable the entire range of computing devices to 
work together and have user information automatically updated and synchronized on all 
of them. In addition, it will provide a premium online subscription service. The service 
will feature customized access to and delivery of products and services from a central 
starting point for the management of various applications (e.g., e-mail) or software (e.g., 
Office .NET). For developers, .NET offers the ability to create reusable modules, which 
should increase productivity and reduce the number of programming errors. 

The full release of .NET is expected to take several years to complete, with inter- 
mittent releases of products such as a personal security service and new versions of 
Windows and Office that implement the .NET strategy coming on the market sepa- 
rately. Visual Studio .NET is a development environment that is now available, and 
Windows XP supports certain .NET capabilities. 

The latest version of Java is Java Enterprise Edition 5 (Java EE 5), which has 
become the primary alternative to Microsoft’s .NET software development platform 
for many organizations intent on capitalizing on the business potential of Web-based 
applications and Web services. Figure 4.23 compares the pros and cons of using Java 
EE 5 and .NET for software development. 


Web services are software components that are based on a framework of Web and 
object-oriented standards and technologies for using the Web that electronically link 
the applications of different users and different computing platforms. Thus, Web 
services can link key business functions for the exchange of data in real time within 
the Web-based applications that a business might share with its customers, suppliers, 
and other business partners. For example, Web services would enable the purchasing 
application of a business to use the Web to check the inventory of a supplier before 
placing a large order, while the sales application of the supplier could use Web ser- 
vices to automatically check the credit rating of the business with a credit-reporting 
agency before approving the purchase. Therefore, among both business and IT pro- 
fessionals, the term Web services is commonly used to describe the Web-based busi- 
ness and computing functions or services accomplished by Web services software 
technologies and standards. 

Figure 4.24 illustrates how Web services work and identifies some of the key tech- 
nologies and standards that are involved. The XML language is one of the key technolo- 
gies that enable Web services to make applications work between different computing 


FIGURE 4.23 The benefits and limitations of the Java Enterprise Edition 5 (Java EE 5) and Microsoft .NET software 
development platforms. 


Java EE 5 .NET 
PROS CONS PROS CONS 

e Runs on any operating Has a complex applica- Easy-to-use tools may Framework runs only 
system and application tion development envi- increase programmer on Windows, restrict- 
server (may need ronment. productivity. ing vendor choice. 
adjustments). Tools can be difficult Has a strong framework Users of prior 

e Handles complex, to use. for building rich graph- Microsoft tools and 
high-volume, high- Java Swing environ- ical user interfaces. technology face a 
transaction applications. ment’s ability to build Gives developers choice potentially steep learn- 

e Has more enterprise graphical user interfaces of working in more ing curve. 
features for session has limitations. than 20 programming New runtime infra- 
management, fail-over, May cost more to build, languages. structure lacks maturity. 
load balancing, and deploy, and manage Is tightly integrated Questions persist about 
application integration. applications. with Microsoft’s operat- the scalability and 

e Is favored by experi- Lacks built-in support ing system and enter- transaction capability of 
enced enterprise ven- for Web services prise server software. the Windows platform. 
dors such as IBM, BEA, standards. May cost less, due in Choice of integrated 
SAP, and Oracle. isdie ae mea for part to built-in applica- development environ- 

e Offers a wide range of quick-turnaround, tion server in Windows, ments is limited. 
vendor choices for tools low-cost, and mass- unified management, Getting older applica- 
and application servers. market projects. and less-expensive tools. tions to run in new 

e Has a proven track Has built-in support for .NET environment may 
record. Web service standards. require effort. 


Source: Carol Silwa, “.NET vs. Java,” Computerworld, May 20, 2002, p. 31. 


FIGURE 4.24 
The basic steps in 
accomplishing a Web 
services application. 


Web service components 
communicate via SOAP, 
an XML-based protocol 


for 


connecting applications 


Source: Adapted from Bala Iyer, Jim Freedman, Mark Gaynor, and George Wyner, “Web Services: 
Enabling Dynamic Business Networks,” Communications of the Association for Information Systems 
11 (2003), p. 543. 
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platforms. Also important are UDDI (Universal Description, Discovery, and Integra- 
tion), the “yellow pages” directory of all Web services and how to locate and use them, 
and SOAP (Simple Object Access Protocol), an XML-based protocol of specifications 
for connecting applications to the data that they need. 

Web services promise to be the key software technology for automating access to 
data and application functions between a business and its trading partners. As companies 
increasingly move to doing business over the Web, Web services will become essential 
for the development of the easy and efficient e-business and e-commerce applications 
that will be required. The flexibility and interoperability of Web services will also be es- 
sential for coping with the fast-changing relationships between a company and its busi- 
ness partners that are commonplace in today’s dynamic global business environment. 


European aircraft builder Airbus has implemented a Web services—based travel man- 
agement application from SAP as a first step in a planned groupwide migration to a 
service-oriented architecture (SOA). The airplane manufacturer is installing the 
travel management component of SAP’s ERP software, mySAP, which uses SOA 
technology. “The new system replaces a homegrown system at the company’s plant 
in France, a Lotus-based system in its Spanish operations, and earlier SAP versions 
at facilities in Germany and the United Kingdom,” says James Westgarth, manager 
of travel technology procurement at Airbus. 

“We like the idea of an open architecture, which SOA enables,” Westgarth says. 
“We like the idea of being able to manage everything internally and to cherry-pick 
for the best solution in every class.” “Additional components, such as online book- 
ing, could also come from SAP—if the software vendor has a superior product for 
that application,” says Westgarth. 

‘The decision to deploy a new Web services—based travel management system was 
driven in large part by a need to reduce administration costs and improve business 
processes. 

Airbus has a travel budget of 250 million euros, which is used to help pay for 
more than 180,000 trips annually. The company aims to reduce costs by eliminating 
the current paper-based reimbursement process, which consumes time and labor, 
with a system that enables employees to process their own travel expenses online 
from their desktops or mobile devices. 

A key benefit for employees: Reimbursement time will be reduced to three 
days from about ten. In addition, the new system allows Airbus to integrate new 
service providers more easily into its operations, notes Westgarth. The manufac- 
turer has outsourced its valued-added tax reclaim activities to a third party spe- 
cialized in this service. With the help of application link enablers, Westgarth and 
his team are able to link their travel management system into the company’s other 
SAP applications, including finance and human resources. Airbus has a strategy to 
eventually migrate to the mySAP ERP across multiple systems and countries over 
a number of years. 

“The company chose travel management to pilot mySAP ERP,” says Westgarth. 
There have been some issues with the rollout of the travel management application, 
Westgarth concedes. “Because we’re the first big company to implement this tech- 
nology, we’ve had difficulty finding enough skilled people on the market,” he said. 
“And some work was required to integrate the Web interface into our portal.” 

But Airbus employees, Westgarth said, like the Web-based application’s new user 
interface, the single sign-on and the step-by-step guidance. And the company likes 
the flexibility. “No one was talking about low-cost carriers five years ago,” he said. 
“We need to adapt to the market and to changing needs.” 


Source: Adapted from John Blau, “Airbus Flies on Web Services With SAP,” IDG News Service/CIO Magazine, June 8, 2006. 
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FIGURE 4.25 

Using the graphical 
programming interface of 
a Java programming tool, 
Forte for Java, by Sun 
Microsystems. 


Various software packages are available to help programmers develop computer pro- 
grams. For example, programming language translators are programs that translate other 
programs into machine language instruction codes that computers can execute. Other 
software packages, such as programming language editors, are called programming tools 
because they help programmers write programs by providing a variety of program 
creation and editing capabilities. See Figure 4.25. 


Computer programs consist of sets of instructions written in programming languages 
that must be translated by a language translator into the computer’s own machine 
language before they can be processed, or executed, by the CPU. Programming lan- 
guage translator programs (or /anguage processors) are known by a variety of names. An 
assembler translates the symbolic instruction codes of programs written in an assem- 
bler language into machine language instructions, whereas a compiler translates high- 
level language statements. 

An interpreter is a special type of compiler that translates and executes each state- 
ment in a program one at a time, instead of first producing a complete machine lan- 
guage program, as compilers and assemblers do. Java is an example of an interpreted 
language. Thus, the program instructions in Java applets are interpreted and executed 
on the fly as the applet is being executed by a client PC. 


Software development and the computer programming process have been enhanced 
by adding graphical programming interfaces and a variety of built-in development ca- 
pabilities. Language translators have always provided some editing and diagnostic 
capabilities to identify programming errors or bugs. However, most software devel- 
opment programs now include powerful graphics-oriented programming editors and 
debuggers. These programming tools help programmers identify and minimize er- 
rors while they are programming. Such programming tools provide a computer- 
aided programming environment, which decreases the drudgery of programming 
while increasing the efficiency and productivity of software developers. Other pro- 
gramming tools include diagramming packages, code generators, libraries of reusa- 
ble objects and program code, and prototyping tools. All of these programming tools 
are an essential part of widely used programming languages like Visual Basic, C++, 
and Java. 
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Since the early days of programming, software developers have needed automated 
tools. Initially the concentration was on program support tools such as translators, 
compilers, assemblers, macroprocessors, and linkers and loaders. However, as com- 
puters became more powerful and the software that ran on them grew larger and 
more complex, the range of support tools began to expand. In particular, the use of 
interactive time-sharing systems for software development encouraged the develop- 
ment of program editors, debuggers, and code analyzers. 

As the range of support tools expanded, manufacturers began to integrate them 
into a single application using a common interface. Such tools were referred to as 
CASE tools (computer-aided software engineering). 

CASE tools can take a number of forms and be applied at different stages of 
the software development process. ‘Those CASE tools that support activities early 
in the life cycle of a software project (e.g., requirements, design support tools) 
are sometimes called front-end or upper CASE tools. Those that are used later in 
the life cycle (e.g., compilers, test support tools) are called back-end or lower 
CASE tools. 

Exploring the details of CASE tools is beyond the scope of this text, and you will 
encounter them again when you study systems analysis and design. For now, remem- 
ber that CASE is an important part of resolving the problems of complex application 
development and maintenance of software applications. 


Software. Computer software consists of two major 
types of programs: (1) application software that directs 
the performance of a particular use, or application, of 
computers to meet the information processing needs of 
users and (2) system software that controls and supports 
the operations of a computer system as it performs vari- 
ous information processing tasks. Refer to Figure 4.2 
for an overview of the major types of software. 


Application Software. Application software includes a 
variety of programs that can be segregated into general- 
purpose and application-specific categories. General- 
purpose application programs perform common 
information processing jobs for end users. Examples 
are word processing, electronic spreadsheet, and 
presentation graphics programs. Application-specific 
programs accomplish information processing tasks 
that support specific business functions or processes, 
scientific or engineering applications, and other 
computer applications in society. 


System Software. System software can be subdivided 
into system management programs and system develop- 
ment programs. System management programs manage 
the hardware, software, network, and data resources of 
a computer system during its execution of information 
processing jobs. Examples of system management 
programs are operating systems, network management 
programs, database management systems, system utili- 
ties, application servers, and performance and security 
monitors. Network management programs support 


and manage telecommunications activities and network 
performance telecommunications networks. Database 
management systems control the development, integra- 
tion, and maintenance of databases. Utilities are 
programs that perform routine computing functions, 
such as backing up data or copying files, as part of an 
operating system or as a separate package. System 
development programs like language translators and 
programming editors help IS specialists develop com- 
puter programs to support business processes. 


Operating Systems. An operating system is an inte- 
grated system of programs that supervises the operation 
of the CPU, controls the input/output storage functions 
of the computer system, and provides various support 
services. An operating system performs five basic 
functions: (1) a user interface for system and network 
communications with users, (2) resource management 
for managing the hardware resources of a computer sys- 
tem, (3) file management for managing files of data and 
programs, (4) task management for managing the tasks a 
computer must accomplish, and (5) utilities and other 
functions that provide miscellaneous support services. 


Programming Languages. Programming languages 
are a major category of system software. They require 
the use of a variety of programming packages to help 
programmers develop computer programs and language 
translator programs to convert programming language 
instructions into machine language instruction codes. 
The five major levels of programming languages are 
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machine languages, assembler languages, high-level and special-purpose languages like HTML and XML 
languages, fourth-generation languages, and object- are being widely used for Web-based business applica- 
oriented languages. Object-oriented languages like Java tions and services. 


Key Terms and Concepts 


These are the key terms and concepts of this chapter. The page number of their first explanation is given in parentheses. 


1. Application service provider 13. Groupware (135) 27. Presentation graphics 
(ASP) (136) 14. High-level language (151) software (134) 
2. Application software (124) 15. HTML (154) 28. Programming language (150) 
3. Assembler language (151) 16. Instant messaging (IM) (131) 29. Software suites (129) 
4. CASE tools (161) 17. Integrated package (129) 30. Spreadsheet package (133) 
5. Cloud computing (138) 18. Java (157) 31. System software (140) 
6. COTS software (124) 19. Language translator (160) 32. User interface (140) 
7. Custom software (124) 20. Machine language (150) 33. Utilities (149) 
8. Desktop publishing (DTP) (133) 21. Middleware (150) 34. Virtual memory (143) 
9. E-mail (130) 22. Multitasking (144) 35. Web browser (130) 
10. Fourth-generation 23. Natural language (152) 36. Web services (157) 
eet oe a 24. Object-oriented language (153) 37. Word processing software (132) 
11. Function-specific application 38. XML (155) 


programs (128) 25. Operating system (140) 


26. Personal information manager 


12. General-purpose application 
PE Pp (PIM) (135) 


programs (124) 


Review Quiz l 


Match one of the previous key terms and concepts with one of the brief examples or definitions that follow. Try to find the 
best fit for answers that seem to fit more than one term or concept. Defend your choices. 


—— 1. An approach to computing where tasks are as- —— 10. The ability to do several computing tasks 
signed to a combination of connections, software, concurrently. 
and services accessed over a network. —— 11. Converts numeric data into graphic displays. 


__— 2. Programs that direct the performance of a specific 12. 


Translates high-level instructions into machine 
use of computers. 


language instructions. 


—— 3. A system of programs that manages the operations ____ 13. Performs housekeeping chores for a computer 
of a computer system. system 
— 4 Companies that own, operate, and maintain ap- —— 14. A category of application software that per- 
plication software for a fee as a service over the forms common information processing tasks 
Internet. for end users. 
5. Integrated software tool that supports the develop- 15. Software available for the specific applications of 


ment of software applications. end users in business, science, and other fields. 


—— 6. Software designed in-house for use by a specific 16. Helps you surf the Web. 
organization or set of users. 
___ 17. Uses your networked computer to send and 


ad The function that provides a means of communi receive messages. 
cation between end users and an operating system. j f 
; l —— 18. Creates and displays a worksheet for analysis. 
—— 8. Acronym meaning commercial off-the-shelf. ; 
; » —— 19. Allows you to create and edit documents. 
____ 9. Provides a greater memory capability than a 


computer’s actual memory capacity. 
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___ 20. Enables you to produce your own brochures and 
newsletters. 


—— 30. As easy to use as one’s native tongue. 


____ 31. Includes programming editors, debuggers, and 


—— 21. Helps you keep track of appointments and tasks. code generators. 


—— 22. A program that performs several general-purpose 
applications. 


___— 32. Produces hyperlinked multimedia documents for 
the Web. 


—— 23. A combination of individual general-purpose —— 33. A Web document content description language. 


application packages that work easily together. —— 34. A popular object-oriented language for Web-based 
—— 24. Software to support the collaboration of teams and applications. 


workgroups. 35. Windows, Linux, and Mac OS are common 


___ 25. Uses instructions in the form of coded strings of examples. 


ones and zeros. 


____ 26. Uses instructions consisting of symbols represent- 


ing operation codes and storage locations. 


—— 27. Uses instructions in the form of brief statements 


or the standard notation of mathematics. 


____ 28. Might take the form of query languages and report 


generators. 


—— 29. Languages that tie together data and the actions 


that will be performed on the data. 


—— 36. Software that helps diverse applications work 


together. 


—— 37. Enables you to communicate and collaborate 


in real time with the online associates in your 
workgroup. 


___ 38. Links business functions within applications for 


the exchange of data between companies via 
the Web. 


Discussion Questions 


. What major trends are occurring in software? What 
capabilities do you expect to see in future software 
packages? 


. How do the different roles of system software and 
application software affect you as a business end user? 
How do you see this changing in the future? 


be customized with tags or labels that are tied to the 
business domain for which it will be used. How do 
companies manage the need to create schemas that are 
specific to their organizations versus the ideal of sharing 
data with their partners? Is there a risk of ending up 
with a bunch of proprietary XML specifications? 


. Refer to the Real World Case on Software-as-a-Service m ATE softwar E a pice ca le 
(SaaS) in the chapter. Do you think GE would have Merging topetier: at ~ te mmpscations 10ra 
been better off developing a system specifically custom- business and its end users? 
ized to their needs, given that GE’s supply chain is like 8. How are HTML, XML, and Java affecting business 
nothing else in the world? applications on the Web? 

. Why is an operating system necessary? That is, why 9. Do you think Linux will surpass, in adoption and use, 
can’t an end user just load an application program into other operating systems for network and Web servers? 
a computer and start computing? Why or why not? 

. Should a Web browser be integrated into an operating 10. Which application software packages are the most 


system? Why or why not? 


. Refer to the Real World Case on data sharing and 
XML in the chapter. As noted above, XML needs to 


important for a business end user to know how to use? 
Explain the reasons for your choices. 


Analysis Exercises 


Complete the following exercises as individual or group projects that apply chapter concepts to real-world business situations. 


a. Surf the Web and their intranets and 
extranets. 


1. Desktop Application Recognition 
Tool Selection 
ABC Department Stores would like to acquire software 
to do the following tasks. Identify which software pack- 
ages they need. 


b. Send messages to one another’s computer 
workstations. 
c. Help employees work together in teams. 
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d. Use a group of productivity packages that work 
together easily. 

. Help sales reps keep track of meetings and sales calls. 

. Type correspondence and reports. 

. Analyze rows and columns of sales figures. 


ao oe O 


. Develop a variety of graphical presentations. 


2. Y2K Revisited 
The End of Time 
Decades ago, programmers trying to conserve valu- 
able storage space shortened year values to two digits. 
This shortcut created what became known as the 
“Y2K” problem or “millennium bug” at the turn of 
the century. Programmers needed to review billions 
of lines of code to ensure important programs would 
continue to operate correctly. The Y2K problem 
merged with the dot-com boom and created a tre- 
mendous demand for information technology em- 
ployees. Information system users spent billions of 
dollars fixing or replacing old software. The IT in- 
dustry is only now beginning to recover from the 
postboom slump. Could such hysteria happen again? 
It can and, very likely, it will. 

‘Today, most programs use several different 
schemes to record dates. One scheme, POSIX time, 
widely employed on UNIX-based systems, requires a 
signed 32-bit integer to store a number representing 
the number of seconds since January 1, 1970. “0” rep- 
resents midnight on January 1, “10” represents 10 sec- 
onds after midnight, and “—10” represents 10 seconds 
before midnight. A simple program then converts 
these data into any number of international date 
formats for display. This scheme works well because 
it allows programmers to subtract one date/time from 
another date/time and directly determine the interval 
between them. It also requires only 4 bytes of storage 
space. But 32 bits still calculates to a finite number, 
whereas time is infinite. As a business manager, you 
will need to be aware of this new threat and steer your 
organization away from repeating history. The follow- 
ing questions will help you evaluate the situation and 
learn from history. 


a. If 1 represents 1 second and 2 represents 2 seconds, 
how many seconds can be represented in a binary 
number 32 bits long? Use a spreadsheet to show 
your calculations. 

b. Given that POSIX time starts at midnight, January 
1, 1970, in what year will time “run out”? Remem- 
ber that half the available numbers represent dates 
before 1970. Use a spreadsheet to show your 
calculations. 

c. As a business manager, what can you do to minimize 
this problem for your organization? 


3. Tracking Project Work 
Queries and Reports 
You are responsible for managing information systems 
development projects at AAA Systems. To better track 


progress in completing projects, you have decided to 
maintain a simple database table to track the time your 
employees spend on various tasks and the projects with 
which they are associated. It will also allow you to keep 
track of employees’ billable hours each week. The table 
below provides a sample data set. 


a. Build a database table to store the data shown and 
enter the records as a set of sample data. 

b. Create a query that will list the hours worked for all 
workers who worked more than 40 hours during 
production week 20. 

c. Create a report grouped by project that will show 
the number of hours devoted to each task on the 
project and the subtotal number of hours devoted 
to each project, as well as a grand total of all hours 
worked. 

d. Create a report grouped by employee that will show 
each employee’s hours worked on each task and total 
hours worked. The user should be able to select a 
production week and find data for just that week 
presented. 


4. Matching Training to Software Use 
3-D Graphing 
You have the responsibility to manage software training 
for Sales, Accounting, and Operations Department 
workers in your organization. You have surveyed the 
workers to get a feel for the amounts of time spent us- 
ing various packages, and the results are shown below. 
The values shown are the total number of workers in 
each department and the total weekly hours the depart- 
ment’s workers spend using each software package. You 
have been asked to prepare a spreadsheet summarizing 
these data and comparing the use of the various pack- 
ages across departments. 


Department Employees Spreadsheet Database Presentations 


Sales 225 410 1,100 650 
Operations 75 710 520 405 
Accounting 30 310 405 50 


a. Create a spreadsheet illustrating each application’s 
average use per department. To do this, you will 
first enter the data shown above. Then compute the 
average weekly spreadsheet use by dividing spread- 
sheet hours by the number of Sales workers. Do this 
for each department. Repeat these three calculations 
for both database and presentation use. Round 
results to the nearest 1/100th. 

b. Create a three-dimensional bar graph illustrat- 
ing the averages by department and software 
package. 

c. A committee has been formed to plan software 
training classes at your company. Prepare a 
slide presentation with four slides illustrating 
your findings. The first slide should serve as an 
introduction to the data; the second slide should 
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contain a copy of the original data table (without your conclusions regarding key applications per 
the averages); the third slide should contain a copy department. Use professional labels, formatting, 
of the three-dimensional bar graph from the previ- and backgrounds. 


ous answer; and the fourth slide should contain 


Project_Name Task_Name Employee_ID Production_Week Hours_Worked 
Fin-Goods-Inv App. Devel. 456 21 42 
Fin-Goods-Inv DB Design 345 20 20 
Fin-Goods-Inv UI Design 234 20 16 
HR Analysis 234 21 24 
HR Analysis 456 20 48 
HR UI Design 123 20 8 
HR UI Design 123 21 40 
HR UI Design 234 21 32 
Shipmt-Tracking DB Design 345 20 24 
Shipmt-Tracking DB Design 345 21 16 
Shipmt- Tracking DB Development 345 21 20 
Shipmt-Tracking UI Design 123 20 32 


Shipmt-Tracking UI Design 234 20 24 
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REAL WORLD 


Wolf Peak International: Failure and 


Success in Application Software for 
the Small-to-Medium Enterprise 


ne of the hazards of a growing small business is a 

software upgrade. If you pick the wrong horse, 

you may find yourself riding in the wrong direc- 
tion. Correcting your course may mean not only writing off 
your first upgrade selection but then going through the ago- 
nizing process of finding a better software solution for your 
company. That’s what happened to Wolf Peak International 
of Layton, Utah, which designs and manufactures eyewear 
for the safety, sporting, driving, and fashion industries. 
Founded in 1998, the privately held small to midsize enter- 
prise (SME) also specializes in overseas production, sourc- 
ing, importing, and promotional distribution services. 

In Wolf Peak’s early days, founder-owner Kurt Daems 
was happy using QuickBooks to handle accounting chores. 
The package is user friendly and allowed him to drill down 
to view transaction details or combine data in a variety of 
ways to create desired reports. As the company prospered, 
however, it quickly outgrew the capabilities of QuickBooks. 

“As Wolf Peak got bigger, the owner felt the need to 
get into a more sophisticated accounting system,” says Ron 
Schwab, CFO at Wolf Peak International. “There were no 
financial people in-house at the time the decision was 
made to purchase a replacement for QuickBooks, and 
the decision was made without a finance person in place to 
review it.” 

Wolf Peak selected one of several accounting software 
packages promoted to growing SMEs. By the time Schwab 
joined the company, the package had been installed for six 
months, following an implementation period that lasted a 
full year. “The biggest difficulty for QuickBooks users is to 
go from a very friendly user interface and the ability to find 
information easily to a more sophisticated, secured, batch- 
oriented accounting system that became an absolute night- 
mare to get data out of,” notes Schwab. “So the company 
paid a lot of money to have this new accounting system, but 
nobody knew how to go in and extract financial or opera- 
tional data used to make critical business decisions.” 

There were other problems. Developing reusable re- 
ports was difficult, time-consuming, and expensive. The 
company paid IT consultants to develop reports for specific 
needs, some of which still had not been delivered, months 
after they were commissioned. Ad hoc reporting was simi- 
larly intractable. Furthermore, the company’s prior-year his- 
tory in QuickBooks could not be converted into the new 
accounting package. A situation like this creates serious 
problems. Accustomed to keeping close tabs on the compa- 
ny’s operations, Daems found that he simply could not get 
the information he wanted. He began to lose track of his 
business. “He got so fed up he finally came to me and said he 
was ready to look at a SAP software alternative he’d heard 
about,” Schwab recalls. “He wasn’t ready to buy it, though, 
because he’d just sunk a lot of money into the new account- 
ing package.” 


One year after Wolf Peak had switched over to the new 
accounting software, Schwab called the offices of Jour- 
ney TEAM, a local SAP services partner, and asked their 
software consultants to demonstrate the SAP Business One 
software suite. 

SAP Business One is an integrated business management 
software package designed specifically for SMEs like 
Wolf Peak: The application automates critical operations in- 
cluding sales, finance, purchasing, inventory, and manufac- 
turing and delivers an accurate, up-to-the-minute view of 
the business. Its relative affordability promises a rapid return 
on investment, and its simplicity means users have a consist- 
ent, intuitive environment that they can learn quickly and 
use effectively. 

“We had a wish list from various company employees 
asking for a variety of capabilities,” recalls Schwab. “The 
Journey TEAM people came in and demonstrated all those 
functionalities and more. They even generated four or 
five reports that we had spent several thousand dollars and 
several months trying to get from our other software con- 
sultants and had not yet received. Based on our data that 
they had input into Business One, Journey TEAM put those 
reports together in an afternoon.” 

Daems still had a few reservations: He needed the buy- 
in of his VP of sales and was concerned about cost. He still 
wasn’t ready to write off the recently installed accounting 
software. 

Journey TEAM came in and gave another presentation 
for the Wolf Peak sales team and, following that, came back 
with an acceptable quote. With some pain, but also consid- 
erable relief, Daems wrote off the existing accounting 
package. “We felt the benefits of SAP Business One far out- 
weighed the costs and time already invested in that software 
system,” Daems says. 

Implementation of Business One took just seven weeks 
from the day of the initial sales presentation. “We imple- 
mented SAP Business One during our busiest period of the 
year with no disruptions,” notes Schwab. “It went better 
than I expected, in particular the cutover and conversion 
to Business One. Journey TEAM did an amazing job of get- 
ting all our old records converted with no real problems at 
all. We met our June 30 deadline and cutover during the 
succeeding long weekend without incident.” 

Schwab’s enthusiasm for SAP Business One is high. 
“This is the best accounting program I’ve ever worked with,” 
he says. “I can drill down to anything I want. And with the 
XL Reporter tool, I can build reports on the fly.” 

Business One includes a seamlessly integrated reporting 
and financial analysis tool called XL Reporter that works 
with Microsoft Excel to provide instant access to financial 
and operational data. It reports on live data drawn from a 
variety of sources including general ledger, receivables, pay- 
ables, sales, purchasing, and inventory software. “Now we’re 


building the reports we want,” says Schwab. “To have a pro- 
gram like XL Reporter that lets us build custom reports, 
preset regular updates, and then work within Microsoft 
Excel—that’s hugely valuable to us. Nobody else offers the 
ability to do ad hoc queries so easily. Even people who aren’t 
serious programmers can go in and create the documents 
they need within the limits of their authorizations. So I 
highly recommend it.” 

For years, Daems had been running an open receiva- 
bles report that presents, for example, all the invoices that 
are 15 days past due and greater than $450. Unfortunately, 
he simply could not run a report like that with the software 
package he bought to replace his old QuickBooks program. 
That situation has now changed. 

“With SAP Business One, we can go in there and ask for 
those parameters and then sort it by oldest, biggest amount, 
or customer,” says Schwab. “And it’s paperless. The accounts 
receivable person doesn’t have to print anything out and 
then write a bunch of notes on it and type them into the 
system for someone else to find. It’s all right there.” 

Wolf Peak also requires a very complicated commissions 
report, used to generate the checks that go out to the com- 
pany’s commissioned sales representatives, who receive indi- 
vidualized reports as well. The previous consultants were 
unable to deliver this set of reports. Journey TEAM was able 
to develop it on Business One in an afternoon. 

Wolf Peak is already expanding its use of SAP Business 
One into other areas. The company has applied the software 
to warehouse management, where it enables Wolf Peak to 
manage inventory, receiving, warehouse delivery, shipping, 
and all the other aspects of the warehousing task. Inventory 
is one of the company’s biggest assets, and it has to be man- 
aged well. “We have an audit report that lists all of the 


CASE STUDY QUESTIONS 


1. What problems occurred when Wolf Peak upgraded 
from QuickBooks to a new accounting software pack- 
age? How could these problems have been avoided? 


2. Why did SAP’s Business One prove to be a better 
choice for Wolf Peak’s management than the new ac- 
counting software? Give several examples to illustrate 
your answer. 


3. Should most SMEs use an integrated business software 
suite like SAP Business One instead of specialized 
accounting and other business software packages? Why 
or why not? 
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inventory, the current on-hand quantity, and the demands 
on it through sales orders or outstanding purchase orders,” 
Schwab says. 

This report then lists the value of that inventory and 
allows Schwab to look at the activity against any inventory 
item during any period. Beyond that, it enables him to drill 
down to the actual invoices that affect that inventory item. 
“We want to minimize what we have on hand,” he says, 
“but we always have to be sure we have enough to meet our 
customers’ needs. Business One lets us do that.” 

Wolf Peak’s management has also begun using the cus- 
tomer relationship management (CRM) functionality within 
Business One to assist with its collection of receivables. The 
company’s plan is to extend its use of the software to develop 
and track sales opportunities as well. Three months follow- 
ing its installation, Wolf Peak is quite happy with its decision 
to go with SAP’s Business One software. “Reports that used 
to take months to create—if we could get them at all—can 
now be created in minutes,” says Schwab. 

A less tangible but no less important benefit is the re- 
newed confidence Business One brings to management “A 
company’s greatest untapped asset is its own financial infor- 
mation,” says Schwab. “SAP Business One creates an envi- 
ronment where the decision makers get the information 
they want on a timely basis, in a format they can use. It’s 
amazing what happens when management begins to see 
what is really happening inside the enterprise. Business One 
delivers useful information to help make good business 
decisions—and that’s really the bottom line. This is a busi- 
ness management tool.” 


Source: Adapted from SAP America, “Wolf Peak: Making the Best Choice to 
Support Growth,” SAP BusinessInsights, March 2007; Journey TEAM, “Wolf 
Peak Success Story—SAP Business One,” ABComputer.com, March 2007. 


REAL WORLD ACTIVITIES 


1. This case demonstrates failure and success in the 
software research, selection, and installation process, 
as well as some major differences among business appli- 
cation software packages in capabilities, such as ease of 
use and information access for employees and manage- 
ment. Search the Internet to find several more examples 
of such success and failure for software suites like SAP 
Business One or Oracle E-Business Suite and special- 
ized business packages like QuickBooks or Great Plains 
Accounting. 


2. Break into small groups with your classmates to discuss 
several key differences you have found on the basis of 
your Internet research. Then make recommendations 
to the class for how these differences should shape 
the business application software selection decision 
for an SME. 
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DATA RESOURCE MANAGEMENT 


Section I 

Technical Foundations of Database Management 
Database Management 

Fundamental Data Concepts 


Real World Case: Cogent Communications, Intel, and 
Others: Mergers Go More Smoothly When Your Data 
Are Ready 


Database Structures 

Database Development 
Section II 

Managing Data Resources 
Data Resource Management 
‘Types of Databases 


Real World Case: Applebee’s, Travelocity, and Others: 
Data Mining for Business Decisions 


Data Warehouses and Data Mining 
Traditional File Processing 
The Database Management Approach 


Real World Case: Amazon, eBay, and Google: Unlocking 
and Sharing Business Databases 


. Explain the business value of implementing data 


resource management processes and technologies 
in an organization. 


. Outline the advantages of a database manage- 


ment approach to managing the data resources 
of a business, compared with a file processing 
approach. 


. Explain how database management software helps 


business professionals and supports the operations 
and management of a business. 


. Provide examples to illustrate each of the follow- 


ing concepts: 

a. Major types of databases. 

b. Data warehouses and data mining. 
c. Logical data elements. 

d. Fundamental database structures. 


e. Database development. 
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Database 
Management 


Fundamental 
Data Concepts 


Character 


Field 


Record 


Technical Foundations of 
Database Management 


Just imagine how difficult it would be to get any information from an information sys- 
tem if data were stored in an unorganized way or if there were no systematic way to re- 
trieve them. Therefore, in all information systems, data resources must be organized 
and structured in some logical manner so that they can be accessed easily, processed ef- 
ficiently, retrieved quickly, and managed effectively. Data structures and access methods 
ranging from simple to complex have been devised to organize and access data stored by 
information systems efficiently. In this chapter, we will explore these concepts, as well as 
the managerial implications and value of data resource management. See Figure 5.1. 

It is important to appreciate from the beginning the value of understanding data- 
bases and database management. In today’s world, just about every piece of data you 
would ever want to access is organized and stored in some type of database. The ques- 
tion is not so much “Should I use a database?” but rather “What database should I 
use?” Although many of you will not choose a career in the design of databases, all of 
you will spend a large portion of your time—whatever job you choose—accessing data 
in a myriad of databases. Most database developers consider accessing the data to be 
the business end of the database world, and understanding how data are structured, 
stored, and accessed can help business professionals gain greater strategic value from 
their organization’s data resources. 

Read the Real World Case 1 on the role of data issues in merger and acquistions. 
We can learn a lot about the importance of careful data planning and documentation 
from this case. 


Before we go any further, let’s discuss some fundamental concepts about how data are 
organized in information systems. A conceptual framework of several levels of data has 
been devised that differentiates among different groupings, or elements, of data. Thus, 
data may be logically organized into characters, fields, records, files, and databases, just as 
writing can be organized into letters, words, sentences, paragraphs, and documents. 
Examples of these logical data elements are shown in Figure 5.2. 


The most basic logical data element is the character, which consists of a single alphabetic, 
numeric, or other symbol. You might argue that the bit or byte is a more elementary data 
element, but remember that those terms refer to the physical storage elements provided 
by the computer hardware, as discussed in Chapter 3. Using that understanding, one way 
to think of a character is that it is a byte used to represent a particular character. From a 
user's point of view (i.e., from a /ogical as opposed to a physical or hardware view of data), 
a character is the most basic element of data that can be observed and manipulated. 


The next higher level of data is the field, or data item. A field consists of a grouping of 
related characters. For example, the grouping of alphabetic characters in a person’s 
name may form a name field (or typically, last name, first name, and middle initial 
fields), and the grouping of numbers in a sales amount forms a sales amount field. 
Specifically, a data field represents an attribute (a characteristic or quality) of some 
entity (object, person, place, or event). For example, an employee’s salary is an at- 
tribute that is a typical data field used to describe an entity who is an employee of a 
business. Generally speaking, fields are organized such that they represent some logi- 
cal order, for example, last_name, first_name, address, city, state, and zip code. 


All of the fields used to describe the attributes of an entity are grouped to form a 
record. Thus, a record represents a collection of attributes that describe a single 
instance of an entity. An example is a person’s payroll record, which consists of data 


REAL WORLD 


hen Cogent Communications eyes a company 

to acquire, it goes into battle mode. Two miles 

north of the Pentagon, across the Potomac in 
Washington, Cogent sets up what it calls the War Room, 
where it marshals eight top executives to evaluate the target 
company. Among those on the due diligence squad are the 
IS director and IT infrastructure manager. 

Cogent, a midsize Internet service provider, understands 
what far too many companies don’t: Its ability to integrate 
and, in some cases, adopt an acquired company’s IT systems 
and operations can determine whether a merger flourishes 
or founders. For one thing, unanticipated IT integration 
costs can offset merger savings. Imagine the business lost 
when orders vanish, accounts payable go uncollected, and 
customer information goes AWOL because the acquiring 
company gave short shrift to the IT challenge ahead. 

As 2006 came to a close, it broke records for the number 
of mergers and acquisitions, but now IT managers have to 
step up and make sure their data centers can help make those 
deals a reality. “A well-run data center with reduced com- 
plexity makes mergers and acquisitions much easier,” says 
Andi Mann, senior analyst at Enterprise Management Asso- 
ciates (EMA). 

More than 11,700 deals were done. As the dust clears, 
experts and IT managers agree that companies will feel the 
full impact of this merger and acquisition (M&A) frenzy di- 
rectly in their data centers. So they advise organizations to 
prep now or risk experiencing downtime if they have to 
merge mission-critical assets. “Today, the most downtime 
companies can afford for critical data center infrastructure is 


FIGURE 5.1 


IT integration and adoption issues can make or 
break merger and acquisition activities. 


Source: McGraw-Hill Companies, Inc./John Flournoy, photographer. 
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Cogent Communications, Intel, and 
Others: Mergers Go More Smoothly 
When Your Data Are Ready 


measured in minutes.” Merged and acquired infrastructure 
“has to be available right away,” says Ryan Osborn of AFCOM, 
a data center industry group. 

Observers agree that the key to M&A success from a 
data center perspective is to focus on virtualization, docu- 
mentation, and logistics. Osborn says these three areas will 
help companies get ahead of the game and turn a time of 
crisis into one of opportunity. “You won’t spend your time 
just moving infrastructure from one data center to another. 
You can actually do a technology refresh, get newer equip- 
ment and come out ahead,” he says. 

For John Musilli, data center operations manager at Intel 
in Santa Clara, California, the most critical piece is knowing 
about basic logistics. “I don’t always have to know what a 
server does, but I do have to know how to keep it alive,” he 
says. “It’s getting something moved from Point A to Point B 
and it doesn’t matter whether the logistics deals with putting 
servers on a truck or transferring data over a line.” 

Musilli has been through a handful of acquisitions in his 
eight years at Intel, and he says that he has it down to a sci- 
ence. “As part of the acquiring company, it’s my job to pro- 
vide the skeletal environment to accept any company’s assets 
that come to us,” he says. As such, he keeps a healthy amount 
of generic racking, generic cabling, extra bandwidth on the 
network, and generic power. “I go generic because I proba- 
bly won’t know what servers, how many slots, or what type 
of power we’ll need beforehand. With generic, I can config- 
ure whatever I need in minutes,” he says. 

For instance, he uses a universal busway for power so 
that he doesn’t have to be concerned about the particular 
electrical needs of the acquired equipment. “We acquired a 
company and needed to integrate them in a short period of 
time because their building lease was up and they had to get 
out of there,” Musilli says. One team was sent ahead of time 
and spent a year trying to identify each server on 30-40 racks. 
“None of their applications matched our operating systems,” 
he says. As time dwindled, Musilli told them to pack up all 
the servers and send them to him. “In the end, it took two 
man-days to move them intact and get them up and running 
in our data center,” he says. 

As companies begin to contemplate future mergers or 
acquisitions, they must look inward at their own processes 
and procedures. “Just as important as technology is docu- 
mentation of processes—you have to know what people are 
doing with the systems,” says EMA’s Mann. He warns that 
one of the first obstacles to having a successful merger or 
acquisition is the reliance on what he refers to as tribal knowl- 
edge. Companies that have data centers where the employees 
hold all the knowledge suffer greatly when, after a merger or 
acquisition, those people are let go. 

“You have to document the knowledge from those peo- 
ple and figure out how to make the processes work with 
only a handful of employees,” he says. Mann recommends 
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creating a workflow chart that outlines who’s responsible for 
each part of the data center. He suggests considering who 
handles network management, systems management, appli- 
cation management, and storage. “This will also help you 
spot redundancies in skill sets or areas where you are lacking 
in the event of a merger,” he says. John Burke, senior analyst 
at Nemertes Research in Minneapolis, says that in addition 
to knowing who is responsible, IT groups must know which 
systems perform which processes. 

“You have to have really good information about what 
goes on in your data center in terms of systems and how they 
interact with each other and how they interface with the 
business. You should always know what services you offer 
and how much it costs to offer them,” Burke says. As part of 
this effort, many organizations employ a configuration man- 
agement database and asset management tool to help track 
elements within the data center. “You need a clear and con- 
cise view of the data flow within the data center. If you don’t 
know what has to move together, you might disrupt business 
during a merger or acquisition,” he says. 

Companies must also develop guidelines for governance 
to be referenced during a merger. For instance, if two law 
firms are merging and have competing clients, then IT 
groups must ensure that data are protected and there is suf- 
ficient access control. AFCOM’s Osborn says that good doc- 
umentation helps the discovery process that companies go 
through before a merger or acquisition. “If the company you 
are acquiring has good documentation and good processes in 
place, the acquisition goes much more smoothly,” he says. 

“In some cases, you might be able to lower your software 
costs if you use a more robust server with fewer processors, 
but if the application license doesn’t allow for that, then you 
can’t,” Osborn says, and adds: “How much money you’re 
going to have to spend to merge technology can weigh heavily 


CASE STUDY QUESTIONS 


1. Place yourself in the role of a manager at a company 
undergoing a merger or acquisition. What would be 
the most important things customers would expect 
from you while still in that process? What role would 
IT play in meeting those expectations? Provide at least 
three examples. 


m 


Focus on what Andi Mann in the case calls “tribal 
knowledge.” What do you think is meant by that, and 
why is it so important to this process? What strategies 
would you suggest for companies that are faced with the 
extensive presence of this issue in an acquired organiza- 
tion? Develop some specific recommendations. 


3. Most of the discussion on the case focused on hardware 
and software issues. However, these are essentially en- 
ablers for underlying business processes developed by 
each of the companies involved. What different alterna- 
tives do companies have for merging their business 
processes, and what role would IT play in supporting 
those activities? Pay particular attention to data man- 
agement and governance issues. 


on the decision to acquire a company.” Nemertes’ Burke 
suggests that one major step to M&A success is to make sure 
your data center has virtualization tools running on both 
servers and storage. 

Virtualization is important not only for scaling the data 
center but also for creating a standardized execution environ- 
ment. “With a well-virtualized data center, you can hide the 
fact that things are moving around multiple servers and stor- 
age devices,” Burke says. Rob Laurie, CEO at virtualization- 
software provider Dunes Technologies in Stamford, 
Connecticutt, says that virtualization is useful for companies 
that want to test application and infrastructure integration be- 
fore they put their merged or acquired assets into production. 
It’s also helpful for companies that must integrate assets that 
can’t be physically moved, he says. He warns, however, that for 
virtualization to be most effective, merging companies must 
decide on a uniform platform for their virtual environment. 
“That way, whatever is virtualized in one company could run 
in the other company’s data center without problems,” he says. 
If they don’t have the same environment, they must at least 
have a compatible data format to gain any benefit. 

Intel’s Musilli suggests that IT’s natural attention to de- 
tail can sometimes overcomplicate matters. “Mergers and 
acquisitions aren’t always as difficult as people make them. 
They’re simply about the ability to assimilate any two envi- 
ronments,” he says. M&As create stress for both acquirer 
and acquiree, but early involvement by IT can minimize the 
trauma. Otherwise, you’ll need to do too much in too little 
time. As software engineering guru Frederick Brooks once 
said, “You can’t make a baby in a month using nine women. 
Plan ahead.” 


Source: Adapted from Sandra Gittien, “Mergers Go Smoother with a Well- 
Prepped Data Center,” Computerworld, July 28, 2007, and Eric Chabrow, “IT 
Plays Linchpin Role in High-Stake M&As,” InformationWeek, June 26, 2006. 


REAL WORLD ACTIVITIES 


1. The case extensively discusses the idea of “virtualiza- 
tion” and the role it plays in the merger process. Go 
online to research this concept and prepare a report 
about what it entails, how it works, what are its 
advantages and disadvantages, and other applications 
in addition to those noted in the case. 


2. Search the Internet for reports of merger and acquisi- 
tion cases where IT issues played an important role, 
either positive or negative. How did different organiza- 
tions handle IT-related matters in the situations you 
found? What was the ultimate outcome of the process? 
Prepare a presentation to share your findings with 
the class. 
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FIGURE 5.2 Examples of the logical data elements in information systems. Note especially the examples of how 
data fields, records, files, and databases relate. 


Employee 
Record 1 


Human Resource Database 
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Employee Employee Employee 
Record 2 Record 3 Record 4 


File 


Database 


fields describing attributes such as the person’s name, Social Security number, and rate 
of pay. Fixed-length records contain a fixed number of fixed-length data fields. Variable- 
length records contain a variable number of fields and field lengths. Another way of 
looking at a record is that it represents a single instance of an entity. Each record in an 
employee file describes one specific employee. 

Normally, the first field in a record is used to store some type of unique identifier 
for the record. This unique identifier is called the primary key. The value of a pri- 
mary key can be anything that will serve to uniquely identify one instance of an entity, 
and distinguish it from another. For example, if we wanted to uniquely identify a sin- 
gle student from a group of related students, we could use a student ID number as a 
primary key. As long as no one shared the same student ID number, we would always 
be able to identify the record of that student. If no specific data can be found to serve 
as a primary key for a record, the database designer can simply assign a record a unique 
sequential number so that no two records will ever have the same primary key. 


A group of related records is a data file ((ometimes referred to as a table or flat file). 
When it is independent of any other files related to it, a single table may be referred to as 
a flat file. As a point of accuracy, the term flat file may be defined either narrowly or 
more broadly. Strictly speaking, a flat file database should consist of nothing but data 
and delimiters. More broadly, the term refers to any database that exists in a single file in 
the form of rows and columns, with no relationships or links between records and fields 
except the table structure. Regardless of the name used, any grouping of related records 
in tabular (row-and-column form) is called a fi/e. Thus, an employee file would contain 
the records of the employees of a firm. Files are frequently classified by the application 
for which they are primarily used, such as a payroll file or an inventory file, or the type of 
data they contain, such as a document file or a graphical image file. Files are also classified 
by their permanence, for example, a payroll master file versus a payroll weekly transaction 
file. A transaction file, therefore, would contain records of all transactions occurring dur- 
ing a period and might be used periodically to update the permanent records contained 
in a master file. A history file is an obsolete transaction or master file retained for backup 
purposes or for long-term historical storage, called archival storage. 


A database is an integrated collection of logically related data elements. A database 
consolidates records previously stored in separate files into a common pool of data 
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FIGURE 5.3 


Some of the entities and 
relationships in a simplified 
electric utility database. 
Note a few of the business 
applications that access the 
data in the database. 
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Source: Adapted from Michael V. Mannino, Database Application Development 
and Design (Burr Ridge, IL: McGraw-Hill/Irwin, 2001), p. 6. 


elements that provides data for many applications. The data stored in a database are 
independent of the application programs using them and of the type of storage devices 
on which they are stored. 

Thus, databases contain data elements describing entities and relationships among 
entities. For example, Figure 5.3 outlines some of the entities and relationships in a 
database for an electric utility. Also shown are some of the business applications (bill- 
ing, payment processing) that depend on access to the data elements in the database. 

As stated in the beginning of the chapter, just about all the data we use are stored 
in some type of database. A database doesn’t need to look complex or technical to be a 
database; it just needs to provide a logical organization method and easy access to the 
data stored in it. You probably use one or two rapidly growing databases just about 
every day: How about Facebook, MySpace, or YouTube? 

All of the pictures, videos, songs, messages, chats, icons, e-mail addresses, and ev- 
erything else stored on each of these popular social networking Web sites are stored as 
fields, records, files, or objects in large databases. The data are stored in such a way to 
ensure that there is easy access to it, it can be shared by its respective owners, and it 
can be protected from unauthorized access or use. When you stop to think about how 
simple it is to use and enjoy these databases, it is easy to forget how large and complex 
they are. 

For example, in July 2006, YouTube reported that viewers watched more than 
100 million videos every day, with 2.5 billion videos in June 2006 alone. In May 2006, 
users added 50,000 videos per day, and this increased to 65,000 videos by July. In 
January 2008 alone, almost 79 million users watched more than 3 billion videos on 
YouTube. In August 2006, The Wall Street Journal published an article revealing that 
YouTube was hosting approximately 6.1 million videos (requiring about 45 terabytes 
of storage space), and had approximately 500 accounts. As of March 2008, a You Tube 
search turned up approximately 77.3 million videos and 2.89 million user channels. 

Perhaps an even more compelling example of ease of access versus complexity is 
found in the popular social networking Web site Facebook. Some of the basic statistics 
are nothing short of amazing! Facebook reports more than 200 million users with 
more than 100 million logging in at least once each day. The average user has 
120 friend relationships established. More than 850 million photos, 8 million videos, 
1 billion pieces of content, and 2.5 million events are uploaded or created each month. 
More than 40 language translations are currently available on the site, with more than 
50 more in development. More than 52,000 software applications exist in the Face- 
book Application Directory and over 30 million active users access Facebook through 
their mobile devices. The size of their databases is best measured in petabytes, which 
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is equal to one quadrillion bytes. All of this from a database and a simple access method 
launched in 2004 from a dorm room at Harvard University. 

The important point here is that all of these videos, user accounts, and information 
are easily accessed because the data are stored in a database system that organizes it so 
that a particular item can be found on demand. 


The relationships among the many individual data elements stored in databases are 
based on one of several logical data structures, or models. Database management system 
(DBMS) packages are designed to use a specific data structure to provide end users with 
quick, easy access to information stored in databases. Five fundamental database struc- 
tures are the hierarchical, network, relational, object-oriented, and multidimensional models. 
Simplified illustrations of the first three database structures are shown in Figure 5.4. 


Hierarchical Structure 
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Department Table Employee Table 
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Source: Adapted from Michael V. Mannino, Database Application Development and Design 
(Burr Ridge, IL: McGraw-Hill/Irwin, 2001), p. 6. 


176 © Module II/ Information Technologies 


Hierarchical 
Structure 


Network Structure 


Relational Structure 


FIGURE 5.5 


Joining the employee and 
department tables in a 
relational database enables 
you to access data 
selectively in both tables 
at the same time. 


Early mainframe DBMS packages used the hierarchical structure, in which the relation- 
ships between records form a hierarchy or treelike structure. In the traditional hierarchi- 
cal model, all records are dependent and arranged in multilevel structures, consisting of 
one root record and any number of subordinate levels. Thus, all of the relationships 
among records are one-to-many because each data element is related to only one element 
above it. The data element or record at the highest level of the hierarchy (the depart- 
ment data element in this illustration) is called the root element. Any data element can 
be accessed by moving progressively downward from a root and along the branches of 
the tree until the desired record (e.g., the employee data element) is located. 


The network structure can represent more complex logical relationships and is still 
used by some mainframe DBMS packages. It allows many-to-many relationships among 
records; that is, the network model can access a data element by following one of sev- 
eral paths because any data element or record can be related to any number of other 
data elements. For example, in Figure 5.4, departmental records can be related to 
more than one employee record, and employee records can be related to more than 
one project record. Thus, you could locate all employee records for a particular de- 
partment or all project records related to a particular employee. 

It should be noted that neither the hierarchical nor the network data structures are 
commonly found in the modern organization. The next data structure we discuss, the 
relational data structure, is the most common of all and serves as the foundation for 
most modern databases in organizations. 


The relational model is the most widely used of the three database structures. It is used by 
most microcomputer DBMS packages, as well as by most midrange and mainframe sys- 
tems. In the relational model, all data elements within the database are viewed as being 
stored in the form of simple two-dimensional tables, sometimes referred to as relations. 
The tables in a relational database are fiat files that have rows and columns. Each row rep- 
resents a single record in the file, and each column represents a field. The major difference 
between a flat file and a database is that a flat file can only have data attributes specified for 
one file. In contrast, a database can specify data attributes for multiple files simultaneously 
and can relate the various data elements in one file to those in one or more other files. 
Figure 5.4 illustrates the relational database model with two tables representing 
some of the relationships among departmental and employee records. Other tables, or 
relations, for this organization’s database might represent the data element relationships 
among projects, divisions, product lines, and so on. Database management system pack- 
ages based on the relational model can link data elements from various tables to provide 
information to users. For example, a manager might want to retrieve and display an 
employee’s name and salary from the employee table in Figure 5.4, as well as the name 
of the employee’s department from the department table, by using their common 
department number field (Deptno) to link or join the two tables. See Figure 5.5. The 
relational model can relate data in any one file with data in another file if both files share 
a common data element or field. Because of this, information can be created by retriev- 
ing data from multiple files even if they are not all stored in the same physical location. 
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Three basic operations can be performed on a relational database to create useful sets 
of data. The select operation is used to create a subset of records that meet a stated 
criterion. For example, a select operation might be used on an employee database to 
create a subset of records that contain all employees who make more than $30,000 per 
year and who have been with the company more than three years. Another way to 
think of the select operation is that it temporarily creates a table whose rows have 
records that meet the selection criteria. 

The join operation can be used to combine two or more tables temporarily so that 
a user can see relevant data in a form that looks like it is all in one big table. Using this 
operation, a user can ask for data to be retrieved from multiple files or databases with- 
out having to go to each one separately. 

Finally, the project operation is used to create a subset of the columns contained in 
the temporary tables created by the select and join operations. Just as the select opera- 
tion creates a subset of records that meet stated criteria, the project operation creates a 
subset of the columns, or fields, that the user wants to see. Using a project operation, the 
user can decide not to view all of the columns in the table but instead only those that 
have the data necessary to answer a particular question or construct a specific report. 

Because of the widespread use of relational models, an abundance of commercial 
products exist to create and manage them. Leading mainframe relational database ap- 
plications include Oracle 10g from Oracle Corp. and DB2 from IBM. A very popular 
midrange database application is SQL Server from Microsoft. The most commonly 
used database application for the PC is Microsoft Access. 


The multidimensional model is a variation of the relational model that uses multidi- 
mensional structures to organize data and express the relationships between data. You 
can visualize multidimensional structures as cubes of data and cubes within cubes of 
data. Each side of the cube is considered a dimension of the data. Figure 5.6 is an ex- 
ample that shows that each dimension can represent a different category, such as prod- 
uct type, region, sales channel, and time. 

Each cell within a multidimensional structure contains aggregated data related to 
elements along each of its dimensions. For example, a single cell may contain the total 
sales for a product in a region for a specific sales channel in a single month. A major 
benefit of multidimensional databases is that they provide a compact and easy-to- 
understand way to visualize and manipulate data elements that have many interrelation- 
ships. So multidimensional databases have become the most popular database structure 
for the analytical databases that support online analytical processing (OLAP) applica- 
tions, in which fast answers to complex business queries are expected. We discuss 
OLAP applications in Chapter 10. 


The object-oriented model is considered one of the key technologies of a new genera- 
tion of multimedia Web-based applications. As Figure 5.7 illustrates, an object con- 
sists of data values describing the attributes of an entity, plus the operations that can 
be performed upon the data. This encapsulation capability allows the object-oriented 
model to handle complex types of data (graphics, pictures, voice, and text) more easily 
than other database structures. 

The object-oriented model also supports inheritance; that is, new objects can be 
automatically created by replicating some or all of the characteristics of one or more 
parent objects. Thus, in Figure 5.7, the checking and savings account objects can inherit 
both the common attributes and operations of the parent bank account object. Such 
capabilities have made object-oriented database management systems (OODBMS) popular 
in computer-aided design (CAD) and a growing number of applications. For example, 
object technology allows designers to develop product designs, store them as objects in 
an object-oriented database, and replicate and modify them to create new product de- 
signs. In addition, multimedia Web-based applications for the Internet and corporate 
intranets and extranets have become a major application area for object technology. 
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FIGURE 5.6 An example of the different dimensions of a multidimensional database. 
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Source: Adapted from Ivar Jacobsen, Maria Ericsson, and Ageneta Jacobsen, The Object 
Advantage: Business Process Reengineering with Object Technology (New York: ACM Press, 1995), 
p. 65. Copyright © 1995, Association for Computing Machinery. Used by permission. 


FIGURE 5.8 
Databases can supply data 
to a wide variety of analysis 
packages, allowing for data 
to be displayed in graphical 
form. 
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Object technology proponents argue that an object-oriented DBMS can work with 
complex data types such as document and graphic images, video clips, audio segments, and 
other subsets of Web pages much more efficiently than relational database management 
systems. However, major relational DBMS vendors have countered by adding object-oriented 
modules to their relational software. Examples include multimedia object extensions to 
IBM’s DB2 and Oracle’s object-based “cartridges” for Oracle 10g. See Figure 5.8. 


The hierarchical data structure was a natural model for the databases used for the struc- 
tured, routine types of transaction processing characteristic of many business operations 
in the early years of data processing and computing. Data for these operations can easily 
be represented by groups of records in a hierarchical relationship. However, as time pro- 
gressed, there were many cases in which information was needed about records that did 
not have hierarchical relationships. For example, in some organizations, employees from 
more than one department can work on more than one project (refer to Figure 5.4). A 
network data structure could easily handle this many-to-many relationship, whereas a 
hierarchical model could not. As such, the more flexible network structure became popu- 
lar for these types of business operations. Like the hierarchical structure, the network 
model was unable to handle ad hoc requests for information easily because its relation- 
ships must be specified in advance, which pointed to the need for the relational model. 

Relational databases enable an end user to receive information easily in response to 
ad hoc requests. That’s because not all of the relationships among the data elements in 
a relationally organized database need to be specified when the database is created. 
Database management software (such as Oracle 11g, DB2, Access, and Approach) cre- 
ates new tables of data relationships by using parts of the data from several tables. 
Thus, relational databases are easier for programmers to work with and easier to main- 
tain than the hierarchical and network models. 

‘The major limitation of the relational model is that relational database manage- 
ment systems cannot process large amounts of business transactions as quickly and 
efficiently as those based on the hierarchical and network models; they also cannot 
process complex, high-volume applications as well as the object-oriented model. This 
performance gap has narrowed with the development of advanced relational database 
software with object-oriented extensions. The use of database management software 
based on the object-oriented and multidimensional models is growing steadily, as 
these technologies are playing a greater role for OLAP and Web-based applications. 
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Database Pioneer 
Rethinks the Best 
Way to Organize 
Data 


Database 
Development 


Is there a better way to build a data warehouse? For years, relational databases, which 
organize data in tables composed of vertical columns and horizontal rows, have 
served as the foundation of data warehouses. Now database pioneer Michael Stone- 
braker is promoting a different way of organizing them, promising much faster 
response times. As a scientist at the University of California at Berkeley in the 1970s, 
Stonebraker was one of the original architects of the Ingres relational database, 
which spawned several commercial variants. A row-based system like Ingres is great 
for executing transactions, but a column-oriented system is a more natural fit for 
data warehouses, Stonebraker now says. 

SQL Server, Sybase, and Teradata all have rows as their central design point. Yet in 
data warehousing, faster performance may be gained through a column layout. Stone- 
braker says all types of queries on “most data warehouses” will run up to 50 times faster 
in a column database. The bigger the data warehouse, the greater the performance gain. 

Why? Data warehouses frequently store transactional data, and each transaction 
has many parts. Columns cut across transactions and store an element of information 
that is standard to each transaction, such as customer name, address, or purchase 
amount. A row, by comparison, may hold 20-200 different elements of a transaction. 
A standard relational database would retrieve all the rows that reflect, say, sales for a 
month, load the data into system memory, and then find all sales records and gener- 
ate an average from them. The ability to focus on just the “sales” column leads to 
improved query performance. 

‘There is a second performance benefit in the column approach. Because columns 
contain similar information from each transaction, it’s possible to derive a compres- 
sion scheme for the data type and then apply it throughout the column. Rows cannot 
be compressed as easily because the nature of the data (e.g., name, zip code, and 
account balance) varies from record to record. Each row would require a different 
compression scheme. 

Compressing data in columns makes for faster storage and retrieval and reduces 
the amount of disk required. “In every data warehouse I see, compression is a good 
thing,” Stonebraker says. “I expect the data warehouse market to become completely 
column-store based.” 


Source: Adapted from Charles Babcock, “Database Pioneer Rethinks the Best Way to Organize Data,” Information- 
Week, February 23, 2008. 


Database management packages like Microsoft Access or Lotus Approach allow end 
users to develop the databases they need easily. See Figure 5.9. However, large or- 
ganizations usually place control of enterprisewide database development in the hands 
of database administrators (DBAs) and other database specialists. This delegation im- 
proves the integrity and security of organizational databases. Database developers use 
the data definition language (DDL) in database management systems like Oracle 11g or 
IBM’s DB2 to develop and specify the data contents, relationships, and structure of 
each database, as well as to modify these database specifications when necessary. Such 
information is cataloged and stored in a database of data definitions and specifications 
called a data dictionary, or metadata repository, which is managed by the database man- 
agement software and maintained by the DBA. 

A data dictionary is a database management catalog or directory containing 
metadata (i.e., data about data). A data dictionary relies on a specialized database soft- 
ware component to manage a database of data definitions, which is metadata about the 
structure, data elements, and other characteristics of an organization’s databases. For 
example, it contains the names and descriptions of all types of data records and their 
interrelationships; information outlining requirements for end users’ access and use of 
application programs; and database maintenance and security. 


FIGURE 5.9 
Creating a database table 
using the Table Wizard of 
Microsoft Access. 
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Which of the sample tables listed below do you want to use to create your table? 
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Source: Courtesy of Microsoft®. 


The database administrator can query data dictionaries to report the status of any 
aspect of a firm’s metadata. The administrator can then make changes to the defini- 
tions of selected data elements. Some active (versus passive) data dictionaries automati- 
cally enforce standard data element definitions whenever end users and application 
programs access an organization’s databases. For example, an active data dictionary 
would not allow a data entry program to use a nonstandard definition of a customer 
record, nor would it allow an employee to enter a name of a customer that exceeded 
the defined size of that data element. 

Developing a large database of complex data types can be a complicated task. 
Database administrators and database design analysts work with end users and systems 
analysts to model business processes and the data they require. Then they determine 
(1) what data definitions should be included in the database and (2) what structures or 
relationships should exist among the data elements. 


As Figure 5.10 illustrates, database development may start with a top-down data 
planning process. Database administrators and designers work with corporate and 
end-user management to develop an enterprise model that defines the basic business 
process of the enterprise. They then define the information needs of end users in a 
business process, such as the purchasing/receiving process that all businesses have. 

Next, end users must identify the key data elements that are needed to perform 
their specific business activities. This step frequently involves developing entity 
relationship diagrams (ERDs) that model the relationships among the many entities 
involved in business processes. For example, Figure 5.11 illustrates some of the rela- 
tionships in a purchasing/receiving process. The ERDs are simply graphical models of 
the various files and their relationships, contained within a database system. End users 
and database designers could use database management or business modeling software 
to help them develop ERD models for the purchasing/receiving process. This would 
help identify the supplier and product data that are required to automate their pur- 
chasing/receiving and other business processes using enterprise resource management 
(ERM) or supply chain management (SCM) software. You will learn about ERDs and 
other data modeling tools in much greater detail if you ever take a course in systems 
analysis and design. 
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FIGURE 5.10 


Database development 
involves data planning and 
database design activities. 
Data models that support 
business processes are used 
to develop databases that 
meet the information needs 
of users. 


FIGURE 5.11 


This entity relationship 
diagram illustrates some of 
the relationships among the 
entities (product, supplier, 
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purchasing/receiving 
business process. 
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Conceptual Data Models 


Such user views are a major part of a data modeling process, during which the re- 
lationships among data elements are identified. Each data model defines the logical 
relationships among the data elements needed to support a basic business process. For 
example, can a supplier provide more than one type of product to us? Can a customer 
have more than one type of account with us? Can an employee have several pay rates 
or be assigned to several project workgroups? 

Answering such questions will identify data relationships that must be represented 
in a data model that supports business processes of an organization. These data mod- 
els then serve as Jogical design frameworks (called schema and subschema). These frame- 
works determine the physical design of databases and the development of application 
programs to support the business processes of the organization. A schema is an overall 
logical view of the relationships among the data elements in a database, whereas the 
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FIGURE 5.12 Example of the logical and physical database views and the software interface of a banking services 
information system. 
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subschema is a logical view of the data relationships needed to support specific end- 
user application programs that will access that database. 

Remember that data models represent logical views of the data and relationships of 
the database. Physical database design takes a physical view of the data (also called the 
internal view) that describes how data are to be physically stored and accessed on the 
storage devices of a computer system. For example, Figure 5.12 illustrates these differ- 
ent database views and the software interface of a bank database processing system. 
This figure focuses on the business processes of checking, savings, and installment 
lending, which are part of a banking services data model that serves as a logical data 
framework for all bank services. 


Large-Scale Data In early 2004, the computers at the Minor Planet Center (MPC) sorted through ap- 
Sets: The Sky Is proximately 10,000 observations of astronomic phenomena. They deemed a handful 
fae of these observations to deserve follow-up because they were either newly discovered 
the Limit or on a path in Earth’s general vicinity. Although the preliminary trajectories that the 
MPC plotted were not based on enough observation to be accurate, unbeknownst to 
center officials, the computer had found one object on a collision path with Earth. 
The discovery was posted on the Web late in the day on January 13, 2004. 
Alan Harris, a senior research scientist at the Space Science Institute in Boulder, 
Colorado, ran some calculations and found that the object was “heading straight for us 
at around 11 miles per second” and would hit in 26 hours. The near-Earth object (NEO) 
was estimated to be about 98 feet in diameter. Depending on its composition, it could 
have disintegrated in the atmosphere or hit the Earth. (The mile-wide, 570-foot Bar- 
ringer Meteorite Crater in Arizona was created by a 148-foot iron object.) Harris was 
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nonetheless skeptical about the object’s preliminary path. The MPC trajectory was 
based on only a few observations—enough to help astronomers find it, but not accurate 
enough to determine its actual course. 

At 8:30 p.m., Brian Marsden, director of the MPC, got a call from NASAS’ Jet 
Propulsion Laboratory. The NASA official “sort of was wondering” about the path 
of the object, Marsden recalls. Marsden ordered further observations, and the bogey 
was determined not to be on a threatening path after all. 

In some ways, scientists were lucky to have found this potential threat, because 
finding NEOs today is literally a hit-or-miss activity. The first warning of an asteroid 
or comet impact may come from calculations performed by some old workstations 
clustered together at the MPC at the Smithsonian Astrophysical Observatory at 
Harvard University. These systems aren’t large enough to map the sky and provide 
scientists with a comprehensive view of everything that could do serious damage, but 
that’s changing. 

One ambitious project is the Large Synoptic Survey Telescope (LSST) in Tucson, 
Arizona. The telescope being built for the LSST project will collect data at a rate of 
about 6 GB (equivalent to the amount of data on one DVD) per 10 seconds, generat- 
ing many petabytes of data over time. One petabyte equals roughly 100 times the printed 
contents of the Library of Congress. The LSST database will probably be the largest 
known nonproprietary database in the world. Because operation of the telescope lies 
some seven to eight years from now, the scientists working on it are hopeful that 
processing capabilities and storage densities will increase enough to handle these 
data, but they can still imagine a supercomputer system of 1,000 or so systems 
networked together. 

Scientists hope that LSST and other parallel efforts will help them identify most 
of the NEOs that may threaten Earth, locating those on a dangerous path long be- 
fore they strike. They hope that information will give them time to develop ways to 
deflect the NEO. These system developments will happen, of course, only if the 
Earth isn’t first destroyed by a comet or asteroid. 


Source: Adapted from Patrick Thibodeau, “IT to Help Avoid Astronomical Armageddon,” Computerworld, 
September 6, 2004. 
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Managing Data Resources 


Data are a vital organizational resource that need to be managed like other important 
business assets. Today’s business enterprises cannot survive or succeed without quality 
data about their internal operations and external environment. 


With each online mouse click, either a fresh bit of data is created or already-stored data 
are retrieved from all those business Web sites. All that’s on top of the heavy demand 
for industrial-strength data storage already in use by scores of big corporations. What’s 
driving the growth is a crushing imperative for corporations to analyze every bit of 
information they can extract from their huge data warehouses for competitive advan- 
tage. That has turned the data storage and management function into a key strategic 
role of the information age. 


That’s why organizations and their managers need to practice data resource 
management, a managerial activity that applies information systems technologies like 
database management, data warehousing, and other data management tools to the task of 
managing an organization’s data resources to meet the information needs of their busi- 
ness stakeholders. This section will show you the managerial implications of using 
data resource management technologies and methods to manage an organization’s 
data assets to meet business information requirements. 

Read the Real World Case 2 on Applebee’s, Travelocity, and Others. We can learn 
a lot from this case about the business value of mining data for decision making. See 
Figure 5.13. 


Continuing developments in information technology and its business applications 
have resulted in the evolution of several major types of databases. Figure 5.14 
illustrates several major conceptual categories of databases that may be found in many 
organizations. Let’s take a brief look at some of them now. 


Operational databases store detailed data needed to support the business processes 
and operations of a company. They are also called subject area databases (SADB), trans- 
action databases, and production databases. Examples are a customer database, human 
resource database, inventory database, and other databases containing data generated 
by business operations. For example, a human resource database like that shown in 
Figure 5.2 would include data identifying each employee and his or her time worked, 
compensation, benefits, performance appraisals, training and development status, and 
other related human resource data. Figure 5.15 illustrates some of the common opera- 
tional databases that can be created and managed for a small business using Microsoft 
Access database management software. 


Many organizations replicate and distribute copies or parts of databases to network 
servers at a variety of sites. These distributed databases can reside on network serv- 
ers on the World Wide Web, on corporate intranets or extranets, or on other com- 
pany networks. Distributed databases may be copies of operational or analytical 
databases, hypermedia or discussion databases, or any other type of database. Rep- 
lication and distribution of databases improve database performance at end-user 
worksites. Ensuring that the data in an organization’s distributed databases are con- 
sistently and concurrently updated is a major challenge of distributed database 
management. 

Distributed databases have both advantages and disadvantages. One primary ad- 
vantage of a distributed database lies with the protection of valuable data. If all of an 
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REAL WORLD 


CASE 


andall Parman, database architect at restaurant chain 

Applebee’s International and head of Teradata’s user 

group, opened ‘Teradata’s annual user conference in 
Las Vegas with a warning to those who aren’t making the 
best use of their data. “Data are like gold,” Parman noted. 
“If you don’t use the gold, you will have someone else who 
will come along and take the opportunity,” speaking to a 
room packed with almost 3,900 attendees. 

Parman drew an analogy to the story about Isaac New- 
ton’s discovery of gravity after he was hit on the head with an 
apple. “What if Newton had just eaten the apple?” he asked. 
“What if we failed to use the technology available, or failed 
to use these insights to take action?” Applebee’s, which 
has 1,900 casual dining restaurants worldwide and grossed 
$1.34 billion in revenue last year, has a four-node, 4TB data 
warehouse system. Although the company has a staff of only 
three database administrators working with the system, “we 
have leveraged our information to gain insight into the 
business,” he said. “Some of those insights were unexpected, 
coming out of the blue while we were looking in a completely 
different direction.” 

For example, Applebee’s had been using the data ware- 
house to analyze the “back-of-house performance” of restau- 
rants, including how long it took employees to prepare food 
in the kitchens. “Someone had the unanticipated insight to 
use back-of-house performance to gauge front-of-house 
performance,” he said. “From looking at the time the order 
was placed to when it was paid for by credit card and sub- 
tracting preparation meal time, we could figure out how 
long servers were spending time with customers.” Parman 


FIGURE 5.13 


Modern organizations are extensively aggregating 
and mining their data to make better decisions. 


Source: ©Digital Vision/Getty Images. 


Applebee’s, Travelocity, and 
Others: Data Mining for 
Business Decisions 


added that the information is being used to help the com- 
pany improve customer experiences. 

Applebee’s has also advanced beyond basic business deci- 
sions based on data—such as replenishing food supplies ac- 
cording to how much finished product was sold daily—to 
developing more sophisticated analyses. His department, for 
example, came up with a “menu optimization quadrant” that 
looks at how well items are selling so that the company can 
make better decisions about not only what to order, but 
about what products to promote. 

Meanwhile, technology vendors see untapped potential 
for businesses to spend money on software and hardware 
that lets them use data to make more sophisticated business 
decisions. “Companies who operate with the greatest speed 
and intelligence will win,” says Teradata CEO Michael 
Koehler. 

Like many companies, Travelocity.com has lots of un- 
structured data contained in e-mails from customers, call 
center representative notes, and other sources that contain 
critical nuggets of information about how customers feel 
about the travel site. To offset the inability of business intel- 
ligence tools to search for unstructured data, Travelocity has 
launched a new project to help it mine almost 600,000 un- 
structured comments so that it can better monitor and re- 
spond to customer service issues. 

The online travel site has begun to install new text ana- 
lytics software that will be used to scour some 40,000 verba- 
tim comments from customer satisfaction surveys, 40,000 
e-mails from customers, and 500,000 interactions with the 
call center that result in comments to surface potential cus- 
tomer service issues. “The truth is that it is very laborious 
and extremely expensive to go through all that verbatim cus- 
tomer feedback to try to extract the information we need to 
have to make business decisions,” notes Don Hill, Traveloc- 
ity’s director of customer advocacy. 

“The text mining capability . . . gives us the ability to go 
through all that verbatim feedback from customers and ex- 
tract meaningful information. We get information on the 
nature of the comments and if the comments are positive or 
negative.” 

‘Travelocity will use text analytics software from Atten- 
sity to automatically identify facts, opinions, requests, trends, 
and trouble spots from the unstructured data. ‘Travelocity 
will then link that analysis with structured data from its 
‘Teradata data warehouse so the company can identify trends. 
“We get to take unstructured data and put it into structured 
data so we can track trends over time,” adds Hill. “We can 
know the frequency of customer comments on issue ‘x’ and 
if comments on that topic are going up, going down, or stay- 
ing the same.” 

Unlike other text analytics technology, which requires 
manual tagging, sorting, and classifying of terms before 
analysis of unstructured data, Attensity’s technology has a 


natural language engine that automatically pulls out impor- 
tant data without a lot of predefining terms, notes Michelle 
de Haaff, vice president of marketing at the vendor. This al- 
lows companies to have an early warning system to tackle 
issues that need to be addressed, she added. 

VistaPrint Ltd., an online retailer based in Lexington, 
Massachusetts, which provides graphic design services and 
custom-printed products, has boosted its customer conver- 
sion rate with Web analytics technology that drills down into 
the most minute details about the 22,000 transactions it 
processes daily at 18 Web sites. 

Like many companies that have invested heavily in on- 
line sales, VistaPrint found itself drowning, more than a year 
ago, in Web log data tracked from its online operations. 
Analyzing online customer behavior and how a new feature 
might affect that behavior is important, but the retrieval and 
analysis of those data were taking hours or even days using 
an old custom-built application, says Dan Malone, senior 
manager of business intelligence at VistaPrint. 

“It wasn’t sustainable, and it wasn’t scalable,” Malone 
says. “We realized that improving conversion rates by even 
a few percentage points can have a big impact on the bot- 
tom line.” So VistaPrint set out to find a Web analytics 
package that could test new user interfaces to see whether 
they could increase conversion rates (the percentage of 
online visitors who become customers), find out why visi- 
tors left the site, and determine the exact point where users 
were dropping off. 

The search first identified two vendor camps. One group 
offered tools that analyzed all available data, without any up- 
front aggregation. The other offered tools that aggregated 
everything upfront but required users to foresee all the que- 
ries they wanted to run, Malone says. “If you have a question 
that falls outside the set of questions you aggregated the data 
for, you have to reprocess the entire data set.” 


CASE STUDY QUESTIONS 


1. What are the business benefits of taking the time and 
effort required to create and operate data warehouses 
such as those described in the case? Do you see any 
disadvantages? Is there any reason why all companies 
shouldn’t use data warehousing technology? 


a 


Applebee’s noted some of the unexpected insights ob- 
tained from analyzing data about “back-of-house” per- 
formance. Using your knowledge of how a restaurant 
works, what other interesting questions would you sug- 
gest to the company? Provide several specific examples. 


w 


Data mining and warehousing technologies use data 
about past events to inform better decision making in 
the future. Do you believe this stifles innovative think- 
ing, causing companies to become too constrained by 
the data they are already collecting to think about unex- 
plored opportunities? Compare and contrast both view- 
points in your answer. 
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The company finally turned to a third option, selecting 
the Visual Site application from Visual Sciences Inc. Visual 
Site uses a sampling method, which means VistaPrint can 
still query the detailed data, but “it is also fast because you’re 
getting responses as soon as you ask a question. It queries 
through 1% of the data you have, and based on that . . . it 
gives you an answer back. It assumes the rest of the 99% [of 
the data] looks like that. Because the data has been rand- 
omized, that is a valid assumption,” notes Malone. 

VistaPrint, which has been using the tool for just over a 
year, runs it alongside the 30-40 new features it tests every 
three weeks. For example, the company was testing a four- 
page path for a user to upload data to be printed on a busi- 
ness card. The test showed that the new upload path had the 
same conversion rate as the control version. “We were a lit- 
tle disappointed because we put in a lot of time to improve 
this flow,” he adds. 

When the company added Visual Site to the operation, 
it found that although the test version was better than the 
control in three out of four pages, the last page had a big 
drop-off rate. “We were able to tell the usability team where 
the problem was,” Malone says. VistaPrint also reduced the 
drop-offs from its sign-in page after the Visual Site 
tool showed that returning customers were using the new 
customer-registration process and getting an error notice. 
The company fixed the problem, and “the sign-in rate 
improved significantly and led to higher conversions,” he 
says. While Malone concedes that it is hard to measure an 
exact return on the investment, the company estimates that 
the tool paid for itself several months after installation. 
Source: Adapted from Heather Havenstein, “Use Web Analytics to Turn 
Online Visitors into Paying Customers,” Computerworld, September 17, 2007; 
Mary Hayes Weier, “Applebee’s Exec Preaches Data Mining for Business 
Decisions,” InformationWeek, October 8, 2007; and Heather Havenstein, 


“Travelocity.com Dives into Text Analytics to Boost Customer Service,” 
Computerworld, November 14, 2007. 


REAL WORLD ACTIVITIES 


1. Go online to the Web site of Attensity (www.attensity. 
com) and research what other products are offered by 
the company that complement those discussed in the 
case. What other examples can you find of companies 
that have benefited from using these technologies? 
Prepare a report to summarize your findings. 


P 


In the opening of the case, Randall Parman of Apple- 
bee’s International compared data to gold. Although it 
is easy to figure out the value of gold at any time, valu- 
ing data has always been subject to controversy. Search 
the Internet for alternative methodologies to putting a 
price tag on the data assets of a company. Contrast 
different approaches and share your findings with the 
class. 


188 © Module II / Information Technologies 


FIGURE 5.14 Examples of some of the major types of databases used by organizations and end users. 
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organization’s data reside in a single physical location, any catastrophic event like a fire 
or damage to the media holding the data would result in an equally catastrophic loss of 
use of that data. By having databases distributed in multiple locations, the negative 
impact of such an event can be minimized. 

Another advantage of distributed databases is found in their storage require- 
ments. Often, a large database system may be distributed into smaller databases 
based on some logical relationship between the data and the location. For example, 
a company with several branch operations may distribute its data so that each 
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branch operation location is also the location of its branch database. Because mul- 
tiple databases in a distributed system can be joined together, each location has 
control of its local data while all other locations can access any database in the com- 
pany if so desired. 

Distributed databases are not without some challenges, however. The primary 
challenge is the maintenance of data accuracy. If a company distributes its database to 
multiple locations, any change to the data in one location must somehow be updated 
in all other locations. This updating can be accomplished in one of two ways: replica- 
tion or duplication. 

Updating a distributed database using replication involves using a specialized 
software application that looks at each distributed database and then finds the 
changes made to it. Once these changes have been identified, the replication process 
makes all of the distributed databases look the same by making the appropriate 
changes to each one. The replication process is very complex and, depending on the 
number and size of the distributed databases, can consume a lot of time and compu- 
ter resources. 

The duplication process, in contrast, is much less complicated. It basically identi- 
fies one database as a master and then duplicates that database at a prescribed time 
after hours so that each distributed location has the same data. One drawback to the 
duplication process is that no changes can ever be made to any database other than the 
master to avoid having local changes overwritten during the duplication process. 
Nonetheless, properly used, duplication and replication can keep all distributed loca- 
tions current with the latest data. 

One additional challenge associated with distributed databases is the extra comput- 
ing power and bandwidth necessary to access multiple databases in multiple locations. 
We will look more closely at the issue of bandwidth in Chapter 6 when we focus on 
telecommunications and networks. 


Access to a wealth of information from external databases is available for a fee from 
commercial online services and with or without charge from many sources on the 
World Wide Web. Web sites provide an endless variety of hyperlinked pages of mul- 
timedia documents in hypermedia databases for you to access. Data are available in the 
form of statistics on economic and demographic activity from statistical databanks, or 
you can view or download abstracts or complete copies of hundreds of newspapers, 
magazines, newsletters, research papers, and other published material and periodicals 
from bibliographic and full-text databases. Whenever you use a search engine like 
Google or Yahoo to look up something on the Internet, you are using an external 
database—a very, very large one! Also, if you are using Google, you are using one that 
averages 112 million searches per day. 


The rapid growth of Web sites on the Internet and corporate intranets and extranets 
has dramatically increased the use of databases of hypertext and hypermedia docu- 
ments. A Web site stores such information in a hypermedia database consisting of 
hyperlinked pages of multimedia (text, graphic and photographic images, video clips, 
audio segments, and so on). That is, from a database management point of view, the 
set of interconnected multimedia pages on a Web site is a database of interrelated hy- 
permedia page elements, rather than interrelated data records. 

Figure 5.16 shows how you might use a Web browser on your client PC to connect 
with a Web network server. This server runs Web server software to access and trans- 
fer the Web pages you request. The Web site illustrated in Figure 5.16 uses a hyper- 
media database consisting of Web page content described by HTML (Hypertext 
Markup Language) code or XML (Extensible Markup Language) labels, image files, 
video files, and audio. The Web server software acts as a database management system 
to manage the transfer of hypermedia files for downloading by the multimedia plug- 
ins of your Web browser. 
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FIGURE 5.16 The components of a Web-based information system include Web browsers, 
servers, and hypermedia databases. 
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In the perfume business, it is new products, like the recent launch of Kate, a fra- 
grance Coty branded for supermodel Kate Moss, that can make or break a compa- 
ny’s year. But big hits can also lead to big problems. When a product takes off, 
Coty must respond quickly to keep shelves full. But its ability to ramp up is de- 
pendent on glass, packaging, and other suppliers. “If we can’t meet demand... it 
annoys the retailers, the consumers lose interest, and we lose sales,” says Dave 
Berry, CIO at Coty, whose other brands include Jennifer Lopez, Kenneth Cole, 
and Vera Wang. 

Empty shelves are the scourge of manufacturing and retail. Just look at the an- 
nual shortages of the Christmas season’s hottest toys or the rain checks stores must 
write regularly on sale items. At any given time, 7 percent all U.S. retail products are 
out of stock; goods on promotion are out of stock more than 15 percent of the time. 
Thats why manufacturers and retailers are pushing for the next breakthroughs in 
demand forecasting, what has emerged as the discipline of “demand-signal manage- 
ment.” Instead of just relying on internal data such as order and shipment records, 
manufacturers are analyzing weekly and even daily point-of-sale data from retailers 
so that they can better see what’s selling where. This sort of timely, detailed data 
lets manufacturers spot trends much sooner by region, product, retailer, and even 
individual store. 

Handling demand-signal data presents the same problems real-time data causes 
in any industry: How to access and integrate high volumes of data, and then com- 
bine and analyze it alongside historical information. With the advent of highly scal- 
able data warehouses, low-latency integration techniques, and faster, deeper query 
and analysis capabilities, the technology is finally here, at a price most can afford. 
And with easier-to-use business intelligence tools, manufacturers and retailers are 
pushing analytic tools into the hands of front-line decision makers, most often field 
sales and marketing people involved in planning, merchandising, and supply chain 
management. 

Over the last two years, Coty has pushed the responsibility for developing accu- 
rate forecasts down to its salespeople. Field-level forecasting makes for more accu- 
rate and responsive planning, says CIO Berry, who credits an analytics application 
from vendor CAS with making it easier for salespeople who are new to business in- 
telligence to analyze point-of-sale data and develop forecasts. 

An important obstacle to broad adoption of demand-signal analysis has been the 
lack of standardization in the data supplied by retailers. Coty gets point-of-sale data 
from the likes of CVS, Target, and Walgreens, but each uses a different format. “The 
timeliness, accuracy, and depth of the data also varies from retailer to retailer, so it’s 
tough to bring it into a data warehouse,” says Berry. 
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That being said, the payoff from early efforts by Coty has been more accurate 
forecasting, higher on-shelf availability, and more effective promotions. With faster 
and more detailed insight into demand, manufacturers can ratchet up revenue by 
2 percent to 7 percent, which more than justifies any data-related headaches. 


Source: Adapted from Doug Henschen, “In A Down Economy, Companies Turn to Real-Time Analytics to Track 
Demand,” InformationWeek, February 28, 2009. 


Data A data warehouse stores data that have been extracted from the various operational, 

external, and other databases of an organization. It is a central source of the data 
Warehouses that have been cleaned, transformed, and cataloged so that they can be used by 
and Data managers and other business professionals for data mining, online analytical 
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processing, and other forms of business analysis, market research, and decision sup- 
port. (We’ll talk in-depth about all of these activities in Chapter 9.) Data ware- 
houses may be subdivided into data marts, which hold subsets of data from the 
warehouse that focus on specific aspects of a company, such as a department or a 
business process. 

Figure 5.17 illustrates the components of a complete data warehouse system. No- 
tice how data from various operational and external databases are captured, cleaned, 
and transformed into data that can be better used for analysis. This acquisition process 
might include activities like consolidating data from several sources, filtering out 
unwanted data, correcting incorrect data, converting data to new data elements, or 
ageregating data into new data subsets. 

‘These data are then stored in the enterprise data warehouse, from which they can 
be moved into data marts or to an analytical data store that holds data in a more useful 
form for certain types of analysis. Metadata (data that define the data in the data ware- 
house) are stored in a metadata repository and cataloged by a metadata directory. Fi- 
nally, a variety of analytical software tools can be provided to query, report, mine, and 
analyze the data for delivery via Internet and intranet Web systems to business end 
users. See Figure 5.18. 

One important characteristic about the data in a data warehouse is that, unlike a 
typical database in which changes can occur constantly, data in a data warehouse are 


7 The components of a complete data warehouse system. 
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static, which means that once the data are gathered up, formatted for storage, and 
stored in the data warehouse, they will never change. This restriction is so that queries 
can be made on the data to look for complex patterns or historical trends that might 
otherwise go unnoticed with dynamic data that change constantly as a result of new 
transactions and updates. 


Data Mining Data mining is a major use of data warehouse databases and the static data they con- 


tain. In data mining, the data in a data warehouse are analyzed to reveal hidden pat- 
terns and trends in historical business activity. This analysis can be used to help 
managers make decisions about strategic changes in business operations to gain com- 
petitive advantages in the marketplace. See Figure 5.19. 

Data mining can discover new correlations, patterns, and trends in vast amounts of 
business data (frequently several terabytes of data) stored in data warehouses. Data 


FIGURE 5.19 How data mining extracts business knowledge from a data warehouse. 
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mining software uses advanced pattern recognition algorithms, as well as a variety of 
mathematical and statistical techniques, to sift through mountains of data to extract 
previously unknown strategic business information. For example, many companies use 
data mining to: 


e Perform market-basket analysis to identify new product bundles. 
e Find root causes of quality or manufacturing problems. 

e Prevent customer attrition and acquire new customers. 

e Cross-sell to existing customers. 


e Profile customers with more accuracy. 


We will discuss data mining further, as well as online analytical processing (OLAP) 
and other technologies that analyze the data in databases and data warehouses to pro- 
vide vital support for business decisions, in Chapter 9. 


Like a muscle car driving 55 mph on the freeway, R.L. Polk & Co.’s new grid-based 
data warehouse boasts gobs of untapped power under the hood. In 2006, the South- 
field, Michigan—based automotive industry market research company finished mov- 
ing its main 4TB customer-facing data warehouse to an Oracle 10g grid comprising 
Dell PowerEdge servers running Linux. The move has helped R.L. Polk save money 
and improve data redundancy, availability, and access time. It also supports Polk’s 
new service-oriented architecture, which is improving customer service. 

“We are getting more bang for our buck,” notes Kevin Vasconi, the company’s 
CIO. The data warehouse is doing 10 million transactions a day “without any is- 
sues.” Encouraged by the experience so far, R.L. Polk is bringing onto the grid 
other databases, both domestic and overseas, that total 2.5 petabytes of actively 
managed data. 

Founded in 1870—the same year the automobile’s predecessor, a motorized 
handcart, was invented in Germany—R.L. Polk started as a publisher of business 
directories. It became a car information supplier in 1921 and began to use computer 
punch cards in 1951. The company is best known to consumers for its Carfax data- 
base of car histories. 

Only a tiny portion of the grid is apportioned now to the data warehouse. Much 
of it is devoted to running R.L. Polk’s new Web-based applications, which both im- 
port data into the data warehouse from 260 discrete sources, such as car dealers or 
state licensing boards, and stream it out to paying customers, such as carmakers, car 
dealers, and parts suppliers. The data warehouse serves as R.L. Polk’s “single source 
of truth” on a massive database that includes 500 million individual cars, or almost 
85 percent of all cars in the world as of 2002. It also includes data on 250 million 
households and 3 billion transactions. 

R.L. Polk cleanses the names and addresses of all incoming records, adds loca- 
tion data such as latitude and longitude, and, in the case of the 17-digit vehicle 
identification numbers unique to every car, extrapolates each car’s individual fea- 
tures and styling. Looking forward, Vasconi says data already stored on vehicles’ 
on-board computers—such as engine-trouble history, GPS-based location history, 
and average speeds—will soon also be imported into the data warehouse if privacy 
issues can be resolved. It’s a complicated process, but as his team continues to tweak 
the Oracle grid engine, he expects to be able to shorten the importation time to less 
than 24 hours. 

“The car is a gold mine of consumer information,” notes Vasconi. 


Source: Adapted from Eric Lai, “Auto Market Researcher Revs Up Oracle Grid for Massive Data Warehouse,” 
Computerworld, October 19, 2006. 
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How would you feel if you were an executive of a company and were told that some 
information you wanted about your employees was too difficult and too costly to 
obtain? Suppose the vice president of information services gave you the following 
reasons: 


e The information you want is in several different files, each organized in a differ- 
ent way. 


e Each file has been organized to be used by a different application program, none 
of which produces the information you want in the form you need. 


e No application program is available to help get the information you want from 
these files. 


That’s how end users can be frustrated when an organization relies on file process- 
ing systems in which data are organized, stored, and processed in independent files of 
data records. In the traditional file processing approach that was used in business data 
processing for many years, each business application was designed to use one or more 
specialized data files containing only specific types of data records. For example, a 
bank’s checking account processing application was designed to access and update a 
data file containing specialized data records for the bank’s checking account custom- 
ers. Similarly, the bank’s installment loan processing application needed to access and 
update a specialized data file containing data records about the bank’s installment loan 
customers. See Figure 5.20. 
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The file processing approach finally became too cumbersome, costly, and inflexible to 
supply the information needed to manage modern business and, as we shall soon see, 
was replaced by the database management approach. Despite their apparent logic and 
simplicity, file processing systems had the following major problems: 


Data Redundancy. Independent data files included a lot of duplicated data; the same 
data (such as a customer’s name and address) were recorded and stored in several files. 
‘This data redundancy caused problems when data had to be updated. Separate file 
maintenance programs had to be developed and coordinated to ensure that each file 
was properly updated. Of course, this coordination proved difficult in practice, so a lot 
of inconsistency occurred among data stored in separate files. 


Lack of Data Integration. Having data in independent files made it difficult to provide 
end users with information for ad hoc requests that required accessing data stored in 
several different files. Special computer programs had to be written to retrieve data 
from each independent file. This retrieval was so difficult, time-consuming, and costly 
for some organizations that it was impossible to provide end users or management with 
such information. End users had to extract the required information manually from the 
various reports produced by each separate application and then prepare customized 
reports for management. 


Data Dependence. In file processing systems, major components of a system—the 
organization of files, their physical locations on storage hardware, and the application 
software used to access those files—depended on one another in significant ways. For 
example, application programs typically contained references to the specific format of 
the data stored in the files they used. Thus, changes in the format and structure of 
data and records in a file required that changes be made to all of the programs that 
used that file. This program maintenance effort was a major burden of file processing 
systems. It proved difficult to do properly, and it resulted in a lot of inconsistency in 
the data files. 


Lack of Data Integrity or Standardization. In file processing systems, it was easy 
for data elements such as stock numbers and customer addresses to be defined dif- 
ferently by different end users and applications. This divergence caused serious in- 
consistency problems in the development of programs to access such data. In 
addition, the integrity (i.e., the accuracy and completeness) of the data was suspect 
because there was no control over their use and maintenance by authorized end us- 
ers. Thus, a lack of standards caused major problems in application program devel- 
opment and maintenance, as well as in the security and integrity of the data files 
needed by the organization. 


When Joe wanted to find love, he turned to science. 

Rather than hang out in bars or hope that random dates worked out, the 34-year-old 
aerospace engineer signed up for eHarmony.com, an online dating service that uses 
detailed profiles, proprietary matching algorithms, and a tightly controlled communica- 
tions process to help people find their perfect soul mate. Over a three-month period, 
Joe found 500 people who appeared to fit his criteria. He initiated contact with 100 of 
them, corresponded with 50, and dated 3 before finding the right match. 

The “scientific” matching services, such as eHarmony, PerfectMatch, and 
Chemistry.com, attempt to identify the most compatible matches for the user by 
asking anywhere from a few dozen to several hundred questions. The services then 
assemble a personality profile and use that against an algorithm that ranks users 
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The Database 
Management 
Approach 


Database 
Management System 


within a set of predefined categories; from there, the system produces a list of 
appropriate matches. 

The technology that powers these dating sites ranges from incredibly simple to 
incredibly complicated. Unsurprisingly, eHarmony has one of the most sophisticated 
data centers. “The company stores 4 terabytes of data on some 20 million registered 
users, each of whom has filled out a 400-question psychological profile,” says Joseph 
Essas, vice president of technology at eHarmony. The company uses proprietary al- 
gorithms to score that data against 29 “dimensions of compatibility”—such as values, 
personality styles, attitudes, and interests—and match up customers with the best 
possible prospects for a long-term relationship. 

A giant Oracle 10g database spits out a few preliminary candidates immediately 
after a user signs up, to prime the pump, but the real matching work happens later, 
after eHarmony’s system scores and matches up answers to hundreds of questions 
from thousands of users. The process requires just under 1 billion calculations that 
are processed in a giant batch operation each day. These operations execute in paral- 
lel on hundreds of computers and are orchestrated using software written to the 
open-source Hadoop software platform. 

Once matches are sent to users, the users’ actions and outcomes are fed back into 
the model for the next day’s calculations. For example, if a customer clicked on many 
matches that were at the outset of his or her geographical range—say, 25 miles 
away—the system would assume distance wasn’t a deal-breaker and next offer more 
matches that were just a bit farther away. 

“Our biggest challenge is the amount of data that we have to constantly score, 
move, apply, and serve to people, and that is fluid,” Essas says. To that end, the archi- 
tecture is designed to scale quickly to meet growth and demand peaks around major 
holidays. The highest demand comes just before Valentine’s Day. “Our demand dou- 
bles, if not quadruples.” 


Source: Adapted from Robert L. Mitchell, “Online Dating: The Technology Behind the Attraction,” Computerworld, 
February 13, 2009. 


To solve the problems encountered with the file processing approach, the database 
management approach was conceived as the foundation of modern methods for man- 
aging organizational data. The database management approach consolidates data 
records, formerly held in separate files, into databases that can be accessed by many 
different application programs. In addition, a database management system (DBMS) 
serves as a software interface between users and databases, which helps users easily ac- 
cess the data in a database. Thus, database management involves the use of database 
management software to control how databases are created, interrogated, and main- 
tained to provide information that end users need. 

For example, customer records and other common types of data are needed for 
several different applications in banking, such as check processing, automated teller 
systems, bank credit cards, savings accounts, and installment loan accounting. These 
data can be consolidated into a common customer database, rather than being kept in 
separate files for each of those applications. See Figure 5.21. 


A database management system (DBMS) is the main software tool of the database 
management approach because it controls the creation, maintenance, and use of the 
databases of an organization and its end users. As we saw in Figure 5.16, microcom- 
puter database management packages such as Microsoft Access, Lotus Approach, or 
Corel Paradox allow you to set up and manage databases on your PC, network server, 
or the World Wide Web. In mainframe and server computer systems, the database 
management system is an important system software package that controls the 


FIGURE 5.21 

An example of a database 
management approach in 

a banking information 
system. Note how the 
savings, checking, and 
installment loan programs 
use a database management 
system to share a customer 
database. Note also that the 
DBMS allows a user to 
make direct, ad hoc 
interrogations of the 
database without using 
application programs. 


FIGURE 5.22 
Database management 
software like MySQL, 
a popular open-source 
DBMS, supports the 
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Checking Account Data 
Savings Account Data 
Installment Loan Data 
Other Customer Data 


development, use, and maintenance of the databases of computer-using organizations. 
Examples of popular mainframe and server versions of DBMS software are IBM’s DB2 
Universal Database, Oracle 10g by Oracle Corp., and MySQL, a popular open-source 


DBMS. See Figure 5.22. Common DBMS components and functions are summarized 
in Figure 5.23. 


development, maintenance, 
and use of the databases of 
an organization. 


Source: Courtesy of MySQL.com. 
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FIGURE 5.23 Common software components and functions of a database management system. 


Common DBMS Software Components 


e Database Definition 


e Nonprocedural Access 


e Transaction Processing 


e Database Tuning 


e Application Development Graphical tools to develop menus, data entry forms, and reports. 


e Procedural Language Interface Language that combines nonprocedural access with full capabilities of a 


Language and graphical tools to define entities, relationships, integrity 
constraints, and authorization rights. 


Language and graphical tools to access data without complicated coding. 


programming language. 


Control mechanisms to prevent interference from simultaneous users and 
recover lost data after a failure. 


‘Tools to monitor and improve database performance. 


Source: Adapted from Michael V. Mannino, Database Application Development and Design (Burr Ridge, IL: McGraw-Hill/Irwin, 2001), p. 7. 


Database 
Interrogation 


FIGURE 5.24 


The three major uses of 
DBMS software are to 
create, maintain, and use 
the databases of an 
organization. 


The three major functions of a database management system are (1) to create new 
databases and database applications, (2) to maintain the quality of the data in an 
organization’s databases, and (3) to use the databases of an organization to provide the 
information that its end users need. See Figure 5.24. 

Database development involves defining and organizing the content, relationships, 
and structure of the data needed to build a database. Database application develop- 
ment involves using a DBMS to develop prototypes of queries, forms, reports, and Web 
pages for a proposed business application. Database maintenance involves using trans- 
action processing systems and other tools to add, delete, update, and correct the data in 
a database. The primary use of a database by end users involves employing the database 
interrogation capabilities of a DBMS to access the data in a database to selectively retrieve 
and display information and produce reports, forms, and other documents. 


A database interrogation capability is a major benefit of the database management 
approach. End users can use a DBMS by asking for information from a database using a 
query feature or a report generator. They can receive an immediate response in the form 
of video displays or printed reports. No difficult programming is required. The query 
language feature lets you easily obtain immediate responses to ad hoc data requests: You 
merely key in a few short inquiries—in some cases, using common sentence structures 
just like you would use to ask a question. The report generator feature allows you to 
specify a report format for information you want presented as a report. Figure 5.25 
illustrates the use of a DBMS report generator. 


SQL Queries. SQL (pronounced “see quill”), or Structured Query Language, is an 
international standard query language found in many DBMS packages. In most cases, 


Operating 
System 


Database —————— 
Management Database 
= Management Databases 


m Create: Database and Application Development 
= Maintain: Database Maintenance 
= Use: Database Interrogation 


FIGURE 5.25 

Using the report generator 
of Microsoft Access to 
create an employee report. 


FIGURE 3.26 
Comparing a natural 
language query with a 
SQL query. 
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Source: Courtesy of Microsoft®. 


SQL is the language structure used to “ask a question” that the DBMS will retrieve 
the data to answer. The basic form of a SQL query is: 


SELECT ...FROM...WHERE... 


After SELECT, you list the data fields you want retrieved. After FROM, you list 
the files or tables from which the data must be retrieved. After WHERE, you specify 
conditions that limit the search to only those data records in which you are interested. 
Figure 5.26 compares a SQL query to a natural language query for information on 
customer orders. 


Boolean Logic. To fully access the power of SQL, a database user needs to have a 
basic understanding of the concepts behind Boolean logic. Developed by George 
Boole in the mid-1800s, Boolean logic allows us to refine our searches for specific in- 
formation such that only the desired information is obtained. 

Boolean logic consists of three logical operators: (1) AND, (2) OR, and (3) NOT. 
Using these operators in conjunction with the syntax of a SQL query, a database user 
can refine a search to ensure that only the desired data are retrieved. ‘This same set of 
logical operators can be used to refine searches for information from the Internet 
(which is really nothing more than the world’s largest database). Let’s look at an exam- 
ple of how the three logical operators work. 

Suppose we are interested in obtaining information about cats from the Internet. 
We could just search on the word cats, and a large number of potentially useful Web 
sites would be retrieved. The problem is that in addition to the Web sites about cats, 
we would also retrieve Web sites about cats and dogs, pets in general (if the site in- 
cludes the word cats), and probably even sites about the Broadway musical titled Cats. 


A Sample Natural Language-to-SQL Translation for Microsoft Access 


Natural Language 
guag 


What Customers had no orders last month? 

SELECT [Customers].[Company Name],[Customers].[Contact Name] 
FROM [Customers] 

WHERE not Exists {SELECT [Ship Name] FROM [Orders] 


WHERE Month {[Order Date]}=l and Year {[Order Date]}=2004 and 
[Customers].[Customer ID]=[Orders].[Customer ID]} 
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Database 
Maintenance 


Application 
Development 


FIGURE 5.27 

Using the Query Wizard 
of the Microsoft Access 
database management 
package to develop a query 
about employee health plan 
choices. 


‘To avoid having to sift through all the sites to find what we want, we could use Boolean 
logic to form a more refined query: 


Cats OR felines AND NOT dogs OR Broadway 


By using this search query, we would retrieve any Web site with the word cats or 
felines but exclude any site that also has the words dogs or Broadway. Using this ap- 
proach, we would eliminate any reference to cats and dogs or to the Broadway musical 
titled Cats. This query therefore would result in a more refined search and eliminate 
the need to look at Web sites that do not pertain to our specific interest. 


Graphical and Natural Queries. Many end users (and IS professionals) have diffi- 
culty correctly phrasing SQL and other database language search queries. So most 
end-user database management packages offer GUI (graphical user interface) point- 
and-click methods, which are easier to use and are translated by the software into SQL 
commands. See Figure 5.27. Other packages are available that use natural language 
query statements similar to conversational English (or other languages), as illustrated 
in Figure 5.26. 


The database maintenance process is accomplished by transaction processing systems 
and other end-user applications, with the support of the DBMS. End users and infor- 
mation specialists can also employ various utilities provided by a DBMS for database 
maintenance. The databases of an organization need to be updated continually to re- 
flect new business transactions (e.g., sales made, products produced, inventory shipped) 
and other events. Other miscellaneous changes also must be made to update and cor- 
rect data (e.g., customer or employee name and address changes) to ensure the accu- 
racy of the data in the databases. We introduced transaction processing systems in 
Chapter 1 and will discuss them in more detail in Chapter 7. 


In addition, DBMS packages play a major role in application development. End users, 
systems analysts, and other application developers can use the internal 4GL program- 
ming language and built-in software development tools provided by many DBMS 
packages to develop custom application programs. For example, you can use a DBMS 
to develop the data entry screens, forms, reports, or Web pages of a business applica- 
tion that accesses a company database to find and update the data it needs. A DBMS 
also makes the job of application software developers easier, because they do not have 
to develop detailed data-handling procedures using conventional programming lan- 
guages every time they write a program. Instead, they can include features such as data 
manipulation language (DML) statements in their software that call on the DBMS to 
perform necessary data-handling activities. 


h Ple r 


teal! 


an Query : Se 
Employees 
* a 


Field: Ifiene TE bepatment Title HealthPlan 
Table: [Employees Employees [Employees [Position Position Position 
Sort: [Ascending [Ascending 

Show: | [z] l M | 


Source: Courtesy of Microsoft®. 
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Data Resource Management. Data resource manage- 
ment is a managerial activity that applies information 
technology and software tools to the task of managing 
an organization’s data resources. Early attempts to 
manage data resources used a file processing approach 
in which data were organized and accessible only in 
specialized files of data records that were designed for 
processing by specific business application programs. 
This approach proved too cumbersome, costly, and 
inflexible to supply the information needed to manage 
modern business processes and organizations. Thus, the 
database management approach was developed to solve 
the problems of file processing systems. 


Database Management. The database management 
approach affects the storage and processing of data. 
The data needed by different applications are consoli- 
dated and integrated into several common databases in- 
stead of being stored in many independent data files. 
Also, the database management approach emphasizes 
updating and maintaining common databases, having 
users’ application programs share the data in the data- 
base, and providing a reporting and an inquiry/response 
capability so that end users can easily receive reports 
and quick responses to requests for information. 


Database Software. Database management systems are 
software packages that simplify the creation, use, and 
maintenance of databases. They provide software tools 
so that end users, programmers, and database adminis- 
trators can create and modify databases; interrogate a 
database; generate reports; do application development; 
and perform database maintenance. 


Types of Databases. Several types of databases are 
used by business organizations, including operational, 


distributed, and external databases. Data warehouses 
are a central source of data from other databases that 
have been cleaned, transformed, and cataloged for busi- 
ness analysis and decision support applications. That 
includes data mining, which attempts to find hidden 
patterns and trends in the warehouse data. Hypermedia 
databases on the World Wide Web and on corporate 
intranets and extranets store hyperlinked multimedia 
pages on a Web site. Web server software can manage 
such databases for quick access and maintenance of the 
Web database. 


Data Access. Data must be organized in some logical 
manner on physical storage devices so that they can be 
efficiently processed. For this reason, data are com- 
monly organized into logical data elements such as 
characters, fields, records, files, and databases. Database 
structures, such as the hierarchical, network, relational, 
and object-oriented models, are used to organize the 
relationships among the data records stored in data- 
bases. Databases and files can be organized in either a 
sequential or direct manner and can be accessed and 
maintained by either sequential access or direct access 
processing methods. 


Database Development. The development of data- 
bases can be easily accomplished using microcomputer 
database management packages for small end-user 
applications. However, the development of large 
corporate databases requires a top-down data planning 
effort that may involve developing enterprise and entity 
relationship models, subject area databases, and data 
models that reflect the logical data elements and rela- 
tionships needed to support the operation and manage- 
ment of the basic business processes of the organization. 


Key Terms and Concepts 


These are the key terms and concepts of this chapter. The page number of their first explanation is in parentheses. 


OO ANA NH BW NY 


10. 


11 


. Data dependence (195) 
. Data dictionary (180) 
. Data integration (195) 


(DBMS) (196) 


12. Database management system 


13. Database structures (175) 
a. Hierarchical structure (176) 


d. Entity (170) 
e. Field (170) 
f. File (173) 

g. Record (170) 


approach (196) 


ee ene (195) b. Multidimensional model (177) 17. Metadata (180) 

. Data mining (192) c. Network structure (176) 18. Replication (189) 

. Data modeling (182) d. Object-oriented model (177) 

Relational módel (176) 19. Structured Query Language 

. Data redundancy (195) fo NAONA AOC’ (SQL) (198) 

. Data resource management (185) 14. Duplication (189) 20. Types of databases (185) 

. Database administrator 15. File processing (194) a. Data warehouse (191) 
(DBA) (180) 16. Logical data elements (170) b. Distributed (185) 
Database interrogation (198) a. Attribute (170) c. External (189) 
Daae maei b. Character (170) d. Hypermedia (189) 

` E c. Database (173) e. Operational (185) 
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Review Quiz 


Match one of the key terms and concepts listed previously with one of the brief examples or definitions that follow. Try to find 
the best fit for answers that seem to fit more than one term or concept. Defend your choices. 


—— 1. The use of integrated collections of data records 
and files for data storage and processing. 


—— 2. Data in independent files made it difficult to 
provide answers to ad hoc requests and required 
special computer programs to be written to 
perform this task. 


—— 3. A specialist in charge of the databases of an 
organization. 


—— 4. Anonprocedural computer language used to 
interrogate a database. 


—— 5. Defines and catalogs the data elements and data 
relationships in an organization’s database. 


____ 6. A feature of database systems that uses queries or 
report generators to extract information. 


—— 7. The main software package that supports a database 
management approach. 


—— 8. Databases that are dispersed over the Internet and 
corporate intranets and extranets. 


—— 9. Databases that organize and store data as objects. 


——— 10. Databases of hyperlinked multimedia documents 
on the Web. 


—— 11. The management of all the data resources of an 
organization. 


12. Processing data in a data warehouse to discover 
key business factors and trends. 


—— 13. Developing conceptual views of the relationships 
among data in a database. 


—— 14. A customer’s name. 
—— 15. A customer’s name, address, and account balance. 


—— 16. The names, addresses, and account balances of all 
of your customers. 


—— 17. An integrated collection of all of the data about 
your customers. 


—— 18. Business application programs that use specialized 
data files. 


—— 19. A treelike structure of records in a database. 


—— 20. A tabular structure of records in a database. 


—— 21. Records organized as cubes within cubes in a 
database. 


____ 22. Databases that support the major business processes 
of an organization. 


—— 23. A centralized and integrated database of current 
and historical data about an organization. 


—— 24. Databases available on the Internet or provided by 
commercial information services. 


—— 25. A problem in the file processing approach where 
major components of a system are dependent on 
each other to a large degree. 


—— 26. Different approaches to the logical organization of 
individual data elements stored in a database. 


—— 27. The most basic logical data element corresponding 
to a single letter or number. 


—— 28. A feature of distributed databases that identifies 
changes in one database and then makes appropri- 
ate changes in the others. 


—— 29. A characteristic of data that refers to their accu- 
racy and completeness. 


—— 30. Data that describe the structure and characteristics 
of databases. 


—— 31. A characteristic or quality of some entity used to 
describe that entity. 


—— 32. Includes, among others, operational, distributed, 
and hypermedia databases. 


—— 33. The existence of duplicate data among different 
files in an organization. 


___ 34. An approach to distributed databases that copies 
the complete content of a master database to others 
at a prescribed time of the day. 


—— 35. An object, person, place, event, and so on that is of 
interest to an organization and thus included in a 
database. 


___— 36. An approach to database structure that improves 
on the hierarchical model by allowing many-to- 
many relationships. 


—— 37. Different levels of data groupings that exist in a 
database. 


Discussion Questions Í 


1. How should a business store, access, and distribute data 
and information about its internal operations and exter- 
nal environment? 


2. What role does database management play in managing 
data as a business resource? 


3. What are the advantages of a database management ap- 
proach to the file processing approach? Give examples 
to illustrate your answer. 


4. Refer to the Real World Case on Cogent Communica- 
tions, Intel, and Others about IT-related issues in M&A 


situations. Although keeping extra infrastructure and 
network capacity allows for an easier transition, it is 
also costly to do so. How can companies balance these 
two sides of the issue? To what extent can organizations 
plan their M&A activity in order to justify keeping this 
extra capacity? 


5. What is the role of a database management system in a 
business information system? 


. In the past, databases of information about a firm’s 
internal operations were the only databases that were 
considered important to a business. What other kinds 
of databases are important for a business today? 


. Refer to the Real World Case on Applebee’s, Traveloc- 
ity, and Others in the chapter. What would be the 
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appropriate set of skills that a user of these technologies 
would possess, as opposed to those that operate on the 
IT side of the issue? How should these technologies be 
designed so that users can focus on getting answers to 
their pressing questions? 


8. What are the benefits and limitations of the relational 


database model for business applications today? 


9. Why is the object-oriented database model gaining ac- 


ceptance for developing applications and managing the 
hypermedia databases on business Web sites? 


10. How have the Internet, intranets, and extranets affected 


the types and uses of data resources available to busi- 
ness professionals? What other database trends are also 
affecting data resource management in business? 


Analysis Exercises 


Complete the following exercises as individual or group projects that apply chapter concepts to real-world businesses. 


1. Joining Tables 
You have the responsibility for managing technical 


Course Table 


Course 


training classes within your organization. These classes 
fall into two general types: highly technical training and 
end-user training. Software engineers sign up for the 
former, and administrative staff sign up for the latter. 
Your supervisor measures your effectiveness in part 
according to the average cost per training hour and type 
of training. In short, your supervisor expects the best 
training for the least cost. 

‘To meet this need, you have negotiated an exclusive 
on-site training contract with Hands-On ‘Technology 
‘Transfer (HOTT) Inc. (www.traininghott.com), a high- 
quality technical training provider. Your negotiated 
rates are reproduced below in the pricing table. A 
separate table contains a sample list of courses you 
routinely make available for your organization. 


a. Using these data, design and populate a table that 
includes basic training rate information. Designate 
the “Technical” field type as “Yes/No” (Boolean). 

b. Using these data, design and populate a course table. 
Designate the CourselID field as a “Primary Key” 
and allow your database to automatically generate a 
value for this field. Designate the “Technical” field 
type as “Yes/No” (Boolean). 

c. Prepare a query that lists each course name and its 
cost per day of training. 

d. Prepare a query that lists the cost per student for 
each class. Assume maximum capacity and that you 
will schedule two half-day classes on the same day to 
take full advantage of HOTT’s per-day pricing 
schedule. 


ID Course Name Duration Technical 


1 ASP Programming 5 Yes 
2 XML Programming 5 Yes 
3 PHP Programming 4 Yes 
4 Microsoft Word—Advanced 5 No 
5 Microsoft Excel—Advanced 5 No 


2. Training-Cost Management 


Having determined the cost per student for each of the 
classes in the previous problem, you now must carefully 
manage class registration. Because you pay the same 
flat rates no matter how many students attend (up to 
capacity), you want to do all you can to ensure maxi- 
mum attendance. Your training provider, Hands-On 
‘Technology Transfer Inc., requires two weeks’ notice 
in the event that you need to reschedule a class. You 
should make sure your classes are at least two-thirds 
full before this deadline. You should also make sure 
you send timely reminders to all attendees so that 

they do not forget to show up. Use the database you 

created in Problem 1 to perform the following 

activities: 

a. Using the information provided in the sample below, 
add a course schedule table to your training data- 
base. Designate the ScheduleID field as a “Primary 
Key” and allow your database program to generate 
a value for this field automatically. Make the 
CourseID field a number field and the StartDate 
field a date field. 


Pricing Table b. Using the information provided in the sample below, 
; ; : add a class roster table to your training database. 
aes Price per Day Capacity Make the ScheduleID field a number field. Make 
Yes $2,680 15 the Reminder and Confirmed fields both “Yes/No” 
No $2,144 30 (Boolean) fields. 
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c. Because the Class Schedule table relates to the 
Course Table and the Course Table relates to the 
Pricing Table, why is it appropriate to record the 
Price per Day information in the Class Schedule 
table too? 

d. What are the advantages and disadvantages of using 
the participant’s name and e-mail address in the 
Class Roster table? What other database design 
might you use to record this information? 

e. Write a query that shows how many people have 
registered for each scheduled class. Include the class 
name, capacity, date, and count of attendees. 


Class Schedule 
Schedule Course Price per 
ID ID Location Start Date Day 
1 1 101-A 7/12/2008 $2,680 
2 1 101-A 7/19/2008 $2,680 
3 1 101-B 7/19/2008 $2,680 
4 4 101-A&B 7/26/2008 $2,144 
5 5 101-A...B 8/2/2008 $2,144 
Class Roster 
Schedule 
ID Participant e-mail Reminder Confirmed 
1 Linda adams.l@... Yes Yes 
Adams 
1 Fatima ahmad.f@... Yes No 
Ahmad 
1 Adam Alba albaa@... Yes Yes 
4 Denys Alyea alyead@... No No 
4 Kathy Bara barak@... Yes No 
. Selling the Sawdust 


Selling Information By-Products 
Sawmill operators are in the business of turning trees 
into lumber. Products include boards, plywood, and 
veneer. For as long as there have been sawmills, there 
have been sawmill operators who have tried to solve the 
problem of what to do with their principal by-product: 
sawdust. Numerous creative examples abound. 
Likewise, businesses often generate tremendous 
amounts of data. The challenge then becomes what to 


do with this by-product. Can a little additional effort 
turn it into a valuable product? Research the following: 


a. What are your college’s or university’s policies 
regarding student directory data? 

b. Does your college or university sell any of its stu- 
dent data? If your institution sells student data, what 
data do they sell, to whom, and for how much? 

c. If your institution sells data, calculate the revenue 
earned per student. Would you be willing to pay this 
amount per year in exchange for maintaining your 
privacy? 


. Data Formats and Manipulation 


Importing Formatted Data into Excel 

Ms. Sapper, a marketing manager in a global account- 
ing firm, was this year’s coordinator for her firm’s an- 
nual partner meeting. With 400 partners from around 
the world, Sapper faced daunting communications 
tasks that she wanted to automate as much as possible. 
Sapper received a file containing all partners’ names, 
as well as additional personal information, from her IT 
department. The file ended with the extension “CSV.” 
She wondered to herself what to do next. 

The CSV, or comma separated values format, is a very 
basic data format that most database applications use to 
import or export data. As a minimum, the CSV format 
groups all fields in a record into a single line of text. It 
then separates each field within a line with a comma or 
other delimiter. When the text information contains 
commas, the format requires this text information to be 
placed within quotes. Sapper needed to get these data 
into Excel. Given how busy the IT guys appeared, she 
decided to do this herself. 


a. Download and save “partners.csv” from the MIS 9e 
OLC. Open the file using Microsoft Word. Remem- 
ber to look for the “csv” file type when searching for 
the file to open. Describe the data’s appearance. 

b. Import the “partner.csv” file into Excel. Remember 
to look for the “csv” file type when searching for the 
file to open. Does Excel automatically format the 
data correctly? Save your file as “partner.xls.” 

c. Describe in your own words why you think database 
manufacturers use common formats to import and 
export data from their systems. 


REAL WORLD 
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Amazon, eBay, and Google: 


Unlocking and Sharing 
Business Databases 


he meeting had dragged on for more than an hour 

that rainy day in Seattle, and Jeff Bezos had heard 

enough. The CEO had rounded up 15 or so sen 
ior engineers and managers in one of Amazon’s offices to 
tackle a question buzzing inside the company: Should Ama- 
zon bust open the doors of its most prized data warehouse, 
containing its myriad databases, and let an eager world of 
entrepreneurs scavenge through its data jewels? 

For several years, scores of outsiders had been knocking 
on Amazon’s door to gain access to the underlying data that 
power the $7 billion retailer: product descriptions, prices, 
sales rankings, customer reviews, inventory figures, and 
countless other layers of content. In all, it was a data vault 
that Amazon had spent more than 10 years and a billion dol- 
lars to build, organize, and safeguard. 

So why on earth would Bezos suddenly hand over the 
keys? In the hands of top Web innovators, some at the meeting 
argued, Amazon’s data could be the dynamo of new Web sites 
and businesses that would expand the company’s already gi- 
gantic online footprint and ultimately drive more sales. Others 
worried about the risks. A free-for-all, one manager warned, 
would “change our business in ways we don’t understand.” 

Bezos ended the debate with characteristic gusto. He 
leaped from his seat, aping a flasher opening a trench coat. 
“We’re going to aggressively expose ourselves!” he declared. 

‘Today, there’s considerable reason to cheer Bezos’s exhi- 
bitionist move. Since the company opened up its data vaults 
in 2002, under the auspices of a project first called Amazon 
Web Services, more than 65,000 developers, businesses, and 
other entrepreneurs have tapped into the data. With it, 
they’re building moneymaking Web sites, new online shop- 
ping interfaces, and innovative services for thousands of 
Amazon’s independent sellers. Many have become Bezos’s 
most ambitious business partners overnight. “Two years ago 
this was an experiment,” says Amazon’s engineering chief, Al 
Vermeulen. “Now it’s a core part of our strategy.” 

And that’s just at Amazon. A year after Bezos’s decision 
to open Amazon’s databases to developers and business part- 
ners, eBay’s chief executive Meg Whitman answered a simi- 
lar cry from eBay’s developer community, opening the 
$3 billion company’s database of 33 million weekly auction 
items to the technorati. Some 15,000 developers and others 
have since registered to use that prized database and access 
other software features. Already, 41 percent of eBay’s listings 
are uploaded to the site using software that takes advantage 
of these newly accessible resources. 

At Google too, the concept is finding its legs: The com- 
pany parcels out some of its search-results data and recently 
unlocked access to its desktop and paid-search products. 
Now dozens of Google-driven services are cropping up, 
from custom Web browsers to graphical search engines. 
Compared with Amazon and eBay, however, Google is tak- 
ing baby steps. Developers can grab 1,000 search results a 


day for free, but anything more than that requires special 
permission. In January 2005, Google finally opened up its 
Ad-Words paid-search service to outside applications, allow- 
ing marketers to automate their Google ad campaigns. 

What’s behind the open-door policies? True to their pi- 
oneering roots, Bezos, Whitman, and the Google boys are 
pushing their companies into what they believe is the Web’s 
great new beyond: an era in which online businesses operate 
as open-ended software platforms that can accommodate 
thousands of other businesses selling symbiotic products and 
services. Says longtime tech-book publisher Tim O'Reilly, 
“We can finally rip, mix, and burn each other’s Web sites.” 

Most people think of Amazon as the world’s largest re- 
tailer, or “earth’s biggest bookstore,” as Bezos called it in 
its start-up days. Inside the company, those perceptions are 
decidedly old school. “We are at heart a technology com- 
pany,” Vermeulen says. He and Bezos have begun to view 
Amazon as just a big piece of software available over the 
Web. “Amazon.com is just another application on the 
platform,” Vermeulen asserts. 

Eric von Hippel, a business professor at MIT’s Sloan 
School of Management, explains the old rules: “We come 
from a culture where if you invested in it, you kept it. That 
was your competitive advantage.” The rise of open-source 
software certainly challenged that notion. The rise of open 
databases and Web services goes even further, holding out 
the promise of automating the links between online busi- 
nesses by applications that depend on companies sharing 
their vital data. 

As Vermeulen says, “Those that succeed have to think 
about removing walls instead of putting them up.” For 
Amazon, there’s some evidence to support that logic. Of the 
65,000 people and companies that have signed up to use 
Amazon’s free goodies, about one-third have been tinkering 
with software tools that help Amazon’s 800,000 or so active 
sellers. 

One of the most clever is ScoutPal, a service that turns 
cell phones into mobile bar-code scanners. “It’s like a Geiger 
counter for books,” founder Dave Anderson says. He came 
up with the idea a couple of years ago when his wife, Bar- 
bara, who sells books on Amazon, would lug home 50 pounds 
of titles from garage sales, only to discover that she’d paid 
too much for many of them to make any money. Anderson 
wrote an application that works in tandem with an attachable 
bar-code scanner. Barbara either scans in books’ bar codes or 
punches in their 10-digit ID numbers. Then she can pull 
down the latest Amazon prices for the books and calculate 
her likely profit margin before she pays for the inventory. 
Anderson says his wife’s sales have since tripled to about 
$100,000 a year, and her profit margins have jumped from 
50 percent to 85 percent. He’s now bringing in six figures 
too: ScoutPal has more than 1,000 subscribers, each paying 
$10 a month. 
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Other tools are also gaining traction. Software programs 
like SellerEngine help merchants on the main site upload 
their inventory, check prices, and automate interactions such 
as adding new listings. Meanwhile, software from Associates 
Shop.com lets thousands of other Web site operators—there 
are more than 900,000 of these so-called Amazon associates— 
create customized storefronts that link back to Amazon, 
generating new sales for Bezos and commission revenue for 
the associates. 

For the near term, maybe the biggest benefit to Amazon 
of letting folks like Anderson tinker with its platform is that it 
gets experimental research and development (R&D) for free. 
“We can try to build all the applications for sellers ourselves,” 
Vermeulen says, “or we can build a platform and let others 
build them.” Adds Bezos, “Right now we just want to get 
people to use the guts of Amazon in ways that surprise us.” 

The experimentation at eBay has been just as ambitious. 
‘The company says that more than 1,000 new applications 
have emerged from its 15,000 or so registered developers. As 
with Amazon, the most popular are applications that help 
sellers automate the process of listing items on eBay or 


CASE STUDY QUESTIONS 


1. What are the business benefits to Amazon and eBay of 
opening up some of their databases to developers and 
entrepreneurs? Do you agree with this strategy? Why 
or why not? 


2. What business factors are causing Google to move 
slowly in opening up its databases? Do you agree with 
its go-slow strategy? Why or why not? 


3. Should other companies follow Amazon’s and eBay’s 
lead and open up some of their databases to developers 
and others? Defend your position with examples of the 
risks and benefits to an actual company. 


displaying them on other sites. Many of these outfits, such as 
Channel Advisor (itself a multimillion-dollar business), 
Marketworks, and Vendio, offer auction-listing software or 
services to eBay sellers. Jeff McManus, eBay’s chief of plat- 
form evangelism, marvels at the benefits. “Sellers who use 
our APIs [application programming interfaces] become at 
least 50 percent more productive than those who use the 
Web site itself.” 

The data links also let companies create storefronts filled 
with their inventory while making transactions over eBay’s 
network. One example is Las Vegas—based SuperPawn, which 
runs a chain of 46 pawnshops in Arizona, California, Nevada, 
‘Texas, and Washington. The company (recently acquired by 
the larger pawnshop operator Cash America International) 
uses eBay’s APIs to automatically upload the latest pawned 
items from its physical stores to eBay. The system already 
generates more than 5 percent of SuperPawn’s $40 million in 
annual sales and thousands more transactions for eBay. 


Source: Erik Schonfeld, “The Great Giveaway,” Business 2.0, April 2005, 
pp. 81-86. 


REAL WORLD ACTIVITIES 


1. The concept of opening up a company’s product, inven- 
tory, and other databases to developers and entrepre- 
neurs is a relatively new one. Use the Internet to find 
examples of companies that have adopted this strategy 
and the benefits they claim for doing so. 


2. Opening up selective databases to outsiders is not a 
risk-free strategy for a company. What risks are in- 
volved? What safeguards should be put in place to 
guard against loss or misuse of a company’s data? Break 
into small groups with your classmates to discuss and 
take a stand on these issues. 
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12. 
13. 


. Understand the concept of a network. 


Apply Metcalfe’s law in understanding the value 
of a network. 


. Identify several major developments and trends 


in the industries, technologies, and business 
applications of telecommunications and Internet 
technologies. 


Provide examples of the business value of 
Internet, intranet, and extranet applications. 


. Identify the basic components, functions, and 


types of telecommunications networks used in 
business. 

Explain the functions of major components of 
telecommunications network hardware, software, 
media, and services. 

Explain the concept of client/server networking. 
Understand the two forms of peer-to-peer 
networking. 

Explain the difference between digital and analog 
signals. 


. Identify the various transmission media and 


topologies used in telecommunications networks. 


. Understand the fundamentals of wireless network 


technologies. 
Explain the concepts behind TCP/IP. 


Understand the seven layers of the OSI network 
model. 
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SECTION I 


The 
Networked 
Enterprise 


The Concept 
of a Network 


Metcalfe’s Law 


The Networked Enterprise 


When computers are networked, two industries—computing and communications— 
converge, and the result is vastly more than the sum of the parts. Suddenly, computing 
applications become available for business-to-business coordination and commerce, and for 
small as well as large organizations. The global Internet creates a public place without geo- 
graphic boundaries—cyberspace—where ordinary citizens can interact, publish their ideas, 
and engage in the purchase of goods and services. In short, the impact of both computing 
and communications on our society and organizational structures is greatly magnified. 


‘Telecommunications and network technologies are internetworking and revolution- 
izing business and society. Businesses have become networked enterprises. The Inter- 
net, the Web, and intranets and extranets are networking business processes and 
employees together and connecting them to their customers, suppliers, and other 
business stakeholders. Companies and workgroups can thus collaborate more crea- 
tively, manage their business operations and resources more effectively, and compete 
successfully in today’s fast-changing global economy. This chapter presents the tele- 
communications and network foundations for these developments. 

Read the Real World Case 1 on the future of public-access Wi-Fi. We can learn a 
lot about new business models for the provision of this almost ubiquitous service from 
this case. See Figure 6.1. 


Because of our focus on information systems and technologies, it is easy for us to think 
of networks in terms of connected computers. ‘To understand the value of connecting 
computers fully, however, it is important to understand the concept of a network in its 
broader sense. 

By definition, the term network means an interconnected or interrelated chain, 
group, or system. Using this definition, we can begin to identify all kinds of networks: 
a chain of hotels, the road system, the names in a person’s address book or PDA, the 
railroad system, the members of a church, club, or organization. The examples of net- 
works in our world are virtually endless, and computer networks, though both valuable 
and powerful, are just one example of the concept. 

The concept of networks can be expressed as a mathematical formula that calculates 
the number of possible connections or interactions in a one-way communication envi- 
ronment: N(N — 1), or N? — N. In the formula, N refers to the number of modes (points 
of connection) on the network. If only a few nodes exist on a network, the number of 
possible connections is quite small. Using the formula, we see that three nodes result in 
only 6 possible connections. A network of 10 nodes results in a somewhat larger 
number—90 connections. It’s when a large number of nodes are connected that the pos- 
sible number of connections grows to significant proportions. A network with 100 nodes 
has 9,900 possible connections, and a network with 1,000 nodes has 999,000 possible 
connections. This type of mathematical growth is called exponential. This term just 
means that the growth in number of connections is many times greater than the number 
of nodes. Adding only one more node to a network makes the number of connections 
grow many times greater. Think of the effect of adding a new entry and exit ramp on a 
highway system that connects 30,000 cities and towns. How many more connections 
does that one new ramp create? Maybe more relevant is the effect of adding one addi- 
tional person as a friend to your Facebook, MySpace, or Plaxo account. If you have 100 
unique friends who each have 100 unique friends and the the new friend has 100 unique 
friends—well, you get the picture. That’s what the next section is all about. 


Robert Metcalfe founded 3Com Corp. and designed the Ethernet protocol for com- 
puter networks. He used his understanding of the concept of networks to express the 
exponential growth in terms of potential business value. Metcalfe’s law states that the 
usefulness, or utility, of a network equals the square of the number of users. 


REAL WORLD 


ublic Wi-Fi hot spots have been popular for about 

eight years. During that time, companies providing 

the service have been groping about, trying to figure 
out how to monetize it. The dominant model to date has 
been just to charge for it. Pay us $20 a month, and you can 
log in at any of our many locations. Recently, however, a 
kind of tipping point has been reached; now, instead of being 
rented for a fee, Wi-Fi will increasingly be given away to 
motivate customers to buy other goods and services. Now 
Wi-Fi is just like the free toaster that banks used to hand out 
for opening a new account. 

Starbucks is leading a transition from Wi-Fi-for-money 
to Wi-Fi as a lure to get people to spend money on other 
things. It probably has to do with the strong competition 
Starbucks is facing for the morning breakfast crowd from 
the likes of McDonald’s, which is also being more aggressive 
with Wi-Fi access. 

The Starbucks offer may be a stroke of genius. Starbucks 
and AT&T will give you two hours of free Wi-Fi per day, 
but only if you use a Starbucks card. If you want more than 
two hours, you can pay $19.99 per month, which also enti- 
tles you to unlimited Wi-Fi offered by AT&T at some 
70,000 hot spots in 89 countries. Starbucks not only trumps 
other sellers of sugar and caffeine by offering free Wi-Fi, 
but also pushes its lucrative Starbucks card and provides an 
upgrade path for people eager to hand over money in ex- 
change for unlimited access. 

Starbucks cards benefit Starbucks in three ways. First, 
people with Starbucks cards in their pockets are probably 
more likely to choose Starbucks when there are other nearby 


FIGURE 6.1 


Public wireless access may be at a crossroad with 
recent moves toward free and advertising-based 
provision of this service. 


Source: Getty Images. 
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Starbucks and Others: 
The Future of Public Wi-Fi 


alternatives. Second, by getting millions of customers to pay 
in advance, Starbucks gets more cash upfront (rather than 
waiting until people actually get their coffee). Last and best 
is that cards get lost, stolen, or forgotten. When that hap- 
pens, Starbucks gets to keep the money without supplying 
anything. 

Like many indie cafes, Seattle’s Bauhaus Books and Coffee 
has long relied on free Wi-Fi to help bring in customers. “In 
the evenings, the whole bar along the window will be lined 
with people using their computers,” says Grace Heinze, a 13- 
year manager at Bauhaus, located between downtown Seattle 
and the trendy neighborhood of Capitol Hill. Bauhaus has 
thrived despite all of the Starbucks shops that have popped up 
around it: 15 within half a mile and 38 within one mile. 

So is Heinze worried that the fiercely artsy cafe, named 
for the 1920’s German art movement and replete with mem- 
orabilia, might lose customers to Starbucks now that it is 
dumping its high Wi-Fi rate in favor of two free hours of 
Wi-Fi a day to any customer? Not really. 

“People come here because they like our atmosphere 
and because they like our coffee,” Heinze said. “We’re not 
feeling very uptight about this.” Wi-Fi hot spots began to 
emerge around the beginning of the millennium. Propelled 
by the fast-growing popularity of laptops, Wi-Fi-enabled 
coffee shops quickly supplanted the older-style cybercafes, 
which relied on the expensive purchase and upkeep of PCs. 

Still, until several years ago, many cafes were granting 
access to their Wi-Fi hot spots through codes given only to 
paying customers, according to Jack Kelley, president of Seat- 
tle regional chain Caffe Ladro. There was the fear “that if 
public Wi-Fi was free, you’d fill your place up with ‘camp- 
ers,” Kelley said, referring to patrons who linger all day 
without buying anything. But that didn’t happen after Ladro’s 
12 Seattle-area cafes switched to free Wi-Fi several years ago. 
Nowadays, “we don’t even care if you sit in the parking lot 
and use it,” Kelley said. Asked about the impact of Starbucks’s 
move on his business, Kelley retorted, “Wi-Fi is free every- 
where these days. Isn’t Starbucks a little behind the times?” 

As pressure mounts to make more Wi-Fi hot spots free, 
some operators are turning to Web advertising to offset costs 
or make money. Those ads are delivered during log-in or at 
the user’s landing page. JiWire serves up ads to more than 
8 million users per month on various Wi-Fi networks, 
including Boingo, at rates far higher than ones on typical 
Web pages. That kind of advertising “sounds gross” to 
Ladro’s Kelley, though. “It’s just like all of those ads in the 
movie theatre,” he said. “I say, enough is enough.” 

“Many patrons of the smaller coffeehouses will continue 
to support their local shop due to loyalty, unique surround- 
ings versus corporate giant, community support, conven- 
ience of location, etc.,” he said. “Any customer losses may 
also be offset simply because there continues to be so much 
more demand for Wi-Fi access in general.” 
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Bauhaus’s Heinze seconds that. “We’re close to two col- 
leges, and we are in a neighborhood with a lot of apartment 
buildings,” she said. Although Bauhaus competes in 
Starbucks’s backyard, according to Heinze, Bauhaus has 
never “done anything reactive. And isn’t that the whole point 
of being an indie coffeehouse, being your own self? If that 
happens to be similar to what Starbucks does, that’s fine.” 

Like television, Wi-Fi is increasingly given away in ex- 
change for ads. It’s an unproven model; nobody is making huge 
profits on this approach yet. JiWire’s “Ads for Access” program 
gives some users free Wi-Fi access at hot spots normally paid 
for by others in exchange for viewing ads over those connec- 
tions. The company has recently (and wisely) started to target 
iPhone users. Wi-Fi is free at some airports. One of the largest 
is Denver International. In addition to advertising, the FreeFi 
Networks Wi-Fi access is subsidized by Disney-ABC televi- 
sion show rentals, which users can download over the connec- 
tion. A company called HypeWifi funds its free Wi-Fi access 
through advertising, but also by doing “market research” for 
advertisers for a fee. Users logging onto a HypeWifi access 
point may earn their access by answering a question or two, 
which is aggregated and presented to the sponsor, along with 
demographic information about the users. 

There’s no industry where all players universally provide 
free Wi-Fi as a matter of course; for example, some hotels 
offer free Wi-Fi, and some don’t. Some airports have it, and 
some don’t. It’s also interesting to note that Wi-Fi works as 
an incentive even when it’s not free. 

After a few fits and starts, Wi-Fi in the transportation in- 
dustry is suddenly taking off. A solid majority of major airlines 
in both the United States and Europe either have or are plan- 
ning to offer in-flight Wi-Fi. Most will charge for the service. 
Within two years, all major carriers will offer in-flight Wi-Fi. 

Airline Wi-Fi, in turn, has triggered a rush to install Wi-Fi 
service in trains across Europe. These rail service companies 
see the airlines as a competitor for the lucrative business trav- 
eler market. Commuter trains and even taxis are getting Wi-Fi; 


CASE STUDY QUESTIONS 


1. Do you agree with the plans by Starbucks to offer time- 
limited free Wi-Fi to customers? Do you think free 
Wi-Fi would be enough to instill that kind of loyalty? 
Based on the experiences of the other coffee houses 
reported above, do you think free access was a critical 
factor in developing a loyal customer base? 


2. Part of the reason for Starbucks’s move had to do with 
increased competition from chains like McDonald’s for 
the morning breakfast crowd. Do you think that free 
wireless access by such a competitor would have moved 
a significant portion of Starbucks’s customers away? 
Why or why not? 


3. The case notes some companies that offer free Wi-Fi in 
exchange for viewing advertisements or answering ques- 
tions for market research studies. Would you be willing to 
do so in order to get free wireless access, say, at an airport? 
Would your answer change if you were using a corporate 
laptop versus your own, because of security concerns? 


in fact, wherever you find a concentration of businesspeople 
with expense accounts and time to kill, expect to find Wi-Fi 
there. Everyone wants these customers because they spend 
money on other things. 

Pricing runs the gamut from no-strings-attached free ac- 
cess, to conspicuously overpriced, to creative or selective 
pricing a la Starbucks or Boingo. Yet the trend is clear: 
Wi-Fi is transitioning gradually to always free everywhere. 
There’s just no downside to these trends. Everybody loves 
Wi-Fi—the freer the better. 

Some, however, do not think Wi-Fi has a future. “As 
mobile broadband takes off, Wi-Fi hot spots will become as 
irrelevant as telephone booths,” says Ericsson Telephone 
Co. chief marketing officer Johan Bergendahl. “Mobile 
broadband is growing faster than mobile or fixed telephony 
ever did.” In Austria, they are saying that mobile broadband 
will pass fixed broadband this year. “It’s already growing 
faster, and in Sweden, the most popular phone is a USB mo- 
dem,” says Bergendahl. 

As more people start to use mobile broadband, hot spots 
will no longer be needed. Also, support for high-speed packet 
access (HSPA), favored by Ericsson, is being built into more 
and more laptops. Ericsson recently signed a deal to put HSPA 
technology in some Lenovo notebooks. “In a few years, [HSPA] 
will be as common as Wi-Fi is today,” says Bergendahl. 

Challenges still remain. Coverage, availability, and 
price—especially when someone is roaming on other 
networks—are all key factors for success. “Industry will have 
to solve the international roaming issue,” Bergendahl says. 
“Carriers need to work together. It can be as simple as pay- 
ing 10 per day when you are abroad.” Not knowing how 
high the bill will be after a business trip is not acceptable for 
professional users. Coverage will also have to improve. 


Source: Adapted from Eric Lai, “Indie Coffeehouses Tell Starbucks: Bring on 
Your Free Wi-Fi,” Computerworld, February 14, 2008; Mikael Ricknas, “Erics- 
son Predicts Demise of Wi-Fi Hotspots,” Computerworld, March 10, 2008; and 
Mike Elgan, “Wi-Fi Wants to Be Free,” Computerworld, February 15, 2008. 


REAL WORLD ACTIVITIES 


1. Johan Bergendahl of Ericsson believes the demise of 
Wi-Fi is rather imminent and that mobile broadband 
will replace hot spots for wireless access. Search the 
Internet for current commercial offerings of mobile 
broadband and compare their features with Wi-Fi 
hotspots. Which one would you choose? Which factors 
would affect your decision? 


2. Go online and look at different companies in one of the 
industries mentioned in the case, noting which compa- 
nies offer free wireless access and which ones do not. 
Break into small groups and brainstorm potential expla- 
nations for these differences. Do you see any patterns in 
the type of companies that charge for access versus 
those that offer it for free? 


Trends in 
Telecom- 
munications 


Industry Trends 


FIGURE 6.2 


Major trends in business 
telecommunications. 
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Metcalfe’s law becomes easy to understand if you think of a common piece of tech- 
nology we all use every day: the telephone. The telephone is of very limited use if only 
you and your best friend have one. If a whole town is on the system, it becomes much 
more useful. If the whole world is wired, the utility of the system is phenomenal. Add 
the number of wireless telephone connections, and you have a massive potential for 
value. To reach this value, however, many people had to have access to a telephone— 
and they had to have used it. In other words, telephone use had to reach a critical mass 
of users. So it is with any technology. 

Until a critical mass of users is reached, a change in technology affects only the 
technology. Once critical mass is attained, however, social, political, and economic 
systems change. The same is true of digital network technologies. Consider the 
Internet. It reached critical mass in 1993, when there were roughly 2.5 million host 
computers on the network; by November 1997, the vast network contained an esti- 
mated 25 million host computers. According to Internet World Stats, the number of 
users on the Internet in March 2009 topped 1.6 billion! More important, that repre- 
sents only about 24 percent of the estimated world population. With computing costs 
continuing to drop rapidly (remember Moore’s law from Chapter 3) and the Internet 
growing exponentially (Metcalfe’s law), we can expect to see more and more value— 
conceivably for less cost—virtually every time we log on. 


Telecommunications is the exchange of information in any form (voice, data, text, im- 
ages, audio, video) over networks. Early telecommunications networks did not use 
computers to route traffic and, as such, were much slower than today’s computer- 
based networks. Major trends occurring in the field of telecommunications have a 
significant impact on management decisions in this area. You should thus be aware of 
major trends in telecommunications industries, technologies, and applications that 
significantly increase the decision alternatives confronting business managers and 
professionals. See Figure 6.2. 


The competitive arena for telecommunications service has changed dramatically in 
recent years. The telecommunications industry has changed from government- 
regulated monopolies to a deregulated market with fiercely competitive suppliers of 
telecommunications services. Numerous companies now offer businesses and consum- 
ers a choice of everything from local and global telephone services to communications 
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FIGURE 6.3 


The spectrum of 
telecommunications-based 
services available today. 


Technology Trends 
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Information 
Transactions 


satellite channels, mobile radio, cable television, cellular phone services, and Internet 
access. See Figure 6.3. 

The explosive growth of the Internet and the World Wide Web has spawned a 
host of new telecommunications products, services, and providers. Driving and re- 
sponding to this growth, business firms have dramatically increased their use of the 
Internet and the Web for electronic commerce and collaboration. Thus, the service 
and vendor options available to meet a company’s telecommunications needs have in- 
creased significantly, as have a business manager’s decision-making alternatives. 


Open systems with unrestricted connectivity, using Internet networking technologies 
as their technology platform, are today’s primary telecommunications technology driv- 
ers. Web browser suites, HTML Web page editors, Internet and intranet servers and 
network management software, TCP/IP Internet networking products, and network 
security firewalls are just a few examples. These technologies are being applied in 
Internet, intranet, and extranet applications, especially those for electronic commerce 
and collaboration. This trend has reinforced previous industry and technical moves 
toward building client/server networks based on an open-systems architecture. 

Open systems are information systems that use common standards for hardware, 
software, applications, and networking. Open systems, like the Internet and corporate 
intranets and extranets, create a computing environment that is open to easy access by 
end users and their networked computer systems. Open systems provide greater con- 
nectivity, that is, the ability of networked computers and other devices to access and 
communicate with one another easily and share information. Any open-systems archi- 
tecture also provides a high degree of network interoperability. That is, open systems 
enable the many different activities of end users to be accomplished using the different 
varieties of computer systems, software packages, and databases provided by a variety 
of interconnected networks. Frequently, software known as middleware may be used to 
help diverse systems work together. 

Middleware is a general term for any programming that serves to glue together or 
mediate between two separate, and usually already existing, programs. A common 
application of middleware is to allow programs written for access to a particular database 
(e.g., DB2) to access other databases (e.g., Oracle) without the need for custom coding. 

Middleware is commonly known as the plumbing of an information system be- 
cause it routes data and information transparently between different back-end data 
sources and end-user applications. It’s not very interesting to look at—it usually doesn’t 
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have much, if any, visible “front end” of its own—but it is an essential component of 
any IT infrastructure because it allows disparate systems to be joined together in a 
common framework. 

‘Telecommunications is also being revolutionized by the rapid change from analog 
to digital network technologies. Telecommunications systems have always depended 
on voice-oriented analog transmission systems designed to transmit the variable elec- 
trical frequencies generated by the sound waves of the human voice. However, local 
and global telecommunications networks are rapidly converting to digital transmis- 
sion technologies that transmit information in the form of discrete pulses, as comput- 
ers do. This conversion provides (1) significantly higher transmission speeds, (2) the 
movement of larger amounts of information, (3) greater economy, and (4) much lower 
error rates than with analog systems. In addition, digital technologies allow telecom- 
munications networks to carry multiple types of communications (data, voice, video) 
on the same circuits. 

Another major trend in telecommunications technology is a change from reliance 
on copper wire—based media and land-based microwave relay systems to fiber-optic 
lines and cellular, communications satellite, and other wireless technologies. Fiber- 
optic transmission, which uses pulses of laser-generated light, offers significant advan- 
tages in terms of reduced size and installation effort, vastly greater communication 
capacity, much faster transmission speeds, and freedom from electrical interference. 
Satellite transmission offers significant advantages for organizations that need to 
transmit massive quantities of data, audio, and video over global networks, especially 
to isolated areas. Cellular, mobile radio, and other wireless systems are connecting 
cellular phones, PDAs, and other wireless appliances to the Internet and corporate 
networks. 


The changes in telecommunications industries and technologies just mentioned are 
causing a significant change in the business use of telecommunications. The trend 
toward more vendors, services, Internet technologies, and open systems, and the rapid 
growth of the Internet, the World Wide Web, and corporate intranets and extranets, 
dramatically increases the number of feasible telecommunications applications. Thus, 
telecommunications networks are now playing vital and pervasive roles in Web- 
enabled e-business processes, e-commerce, enterprise collaboration, and other busi- 
ness applications that support the operations, management, and strategic objectives of 
both large and small business enterprises. 


We cannot leave our overview of trends in telecommunications without reiterating 
that the Internet sits firmly in the center of the action. Despite its importance and 
seemingly unexplored boundaries, we are already embarking on the next generation 
of the “network of networks.” Internet2 is a high-performance network that uses an 
entirely different infrastructure than the public Internet we know today. Already, 
more than 200 universities and scientific institutions and 70 communications corpo- 
rations are part of the Internet2 network. One big misconception about Internet2 is 
that it’s a sequel to the original Internet and will replace it someday. It never will, 
because it was never intended to replace the Internet. Rather, its purpose is to build a 
road map that can be followed during the next stage of innovation for the current 
Internet. The ideas being honed, such as new addressing protocols and satellite- 
quality streaming video, will likely be deployed to the Internet, but it might take 
close to 10 years before we see them. 

Furthermore, the Internet2 network may never become totally open; it might 
remain solely in the domain of universities, research centers, and governments. To be 
sure, the lightning-fast technologies in use by Internet2 right now must eventually 
be turned over to the public Internet. For now, the Internet2 project lives for the 
purpose of sharing, collaborating, and trying new high-speed communication ideas— 
interestingly, many of the same goals that shaped the early history of today’s Internet. 
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Most of the institutions and commercial partners on the Internet2 network are 
connected via Abilene, a network backbone that will soon support throughput of 
10 gigabits per second (Gbps). Several international networks are also plugged into 
Abilene’s infrastructure, and as the project grows, more and more networks will be 
able to connect to the current framework. The one common denominator among all 
of the Internet2 partners is their active participation in the development and testing of 
new applications and Internet protocols with an emphasis on research and collabora- 
tion, focusing on things such as videoconferencing, multicasting, remote applications, 
and new protocols that take advantage of the many opportunities megabandwidth pro- 
vides. In short, Internet2 is all about high-speed telecommunications and infinite 
bandwidth. 

‘To give you an idea of exactly how fast this network of the future is, an interna- 
tional team of researchers has already used it to set a new land speed record. At the 
end of 2002, the team sent 6.7 gigabytes of data across 6,821 miles of fiber-optic net- 
work in less than one minute. That’s roughly two full-length DVD-quality movies 
traveling a quarter of the way around the earth in less than one minute at an average 
speed of 923 million bits per second! It’s also approximately 410,000 miles per hour. 
‘The same team is already hard at work, attempting to break its own record. 

As we are exploring new ways to gain business advantage through the Internet, a 
significant effort is being made to make the Internet bigger and faster. In 2009, Inter- 
net2 celebrated its thirteenth anniversary and has significantly expanded in breadth, 
speed, and storage capacity since its inception in 1996. We’ll look at Internet2 again 
later in this chapter when we discuss Internet-addressing protocols. 


The Business What business value is created when a company capitalizes on the trends in telecom- 
Val f munications we have just identified? Use of the Internet, intranets, extranets, and 

alue O other telecommunications networks can dramatically cut costs, shorten business lead 
Telecom- times and response times, support e-commerce, improve the collaboration of work- 
munications groups, develop online operational processes, share resources, lock in customers and 
Networks suppliers, and develop new products and services. These benefits make applications of 


telecommunications more strategic and vital for businesses that must increasingly find 
new ways to compete in both domestic and global markets. 

Figure 6.4 illustrates how telecommunications-based business applications can 
help a company overcome geographic, time, cost, and structural barriers to business 


FIGURE 6.4 Examples of the business value of business applications of telecommunications networks. 


Strategic Capabilities e-Business Examples Business Value 
Overcome geographic barriers: Use the Internet and extranets to Provides better customer service by 
Capture information about business transmit customer orders from reducing delay in filling orders and 
transactions from remote locations. traveling salespeople to a corporate improves cash flow by speeding up 
data center for order processing and the billing of customers. 
inventory control. 
Overcome time barriers: Provide Credit authorization at the point Credit inquiries can be made and 
information to remote locations of sale using online POS networks. answered in seconds. 
immediately after it is requested. 
Overcome cost barriers: Reduce Desktop videoconferencing between Reduces expensive business trips; allows 
the cost of more traditional means a company and its business partners customers, suppliers, and employees to 
of communication. using the Internet, intranets, and collaborate, thus improving the quality 
extranets. of decisions reached. 
Overcome structural barriers: Business-to-business electronic Fast, convenient services lock in 
Support linkages for competitive commerce Web sites for transactions customers and suppliers. 
advantage. with suppliers and customers using the 


Internet and extranets. 


The Internet 
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Internet Service 
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success. Note the examples of the business value of these four strategic capabilities of 
telecommunications networks. This figure emphasizes how several e-business appli- 
cations can help a firm capture and provide information quickly to end users at 
remote geographic locations at reduced costs, as well as support its strategic organi- 
zational objectives. 

For example, traveling salespeople and those at regional sales offices can use the 
Internet, extranets, and other networks to transmit customer orders from their lap- 
tops or desktop PCs, thus breaking geographic barriers. Point-of-sale terminals and 
an online sales transaction processing network can break time barriers by supporting 
immediate credit authorization and sales processing. Teleconferencing can be used to 
cut costs by reducing the need for expensive business trips, allowing customers, sup- 
pliers, and employees to participate in meetings and collaborate on joint projects 
without traveling. Finally, business-to-business e-commerce Web sites are used by 
businesses to establish strategic relationships with their customers and suppliers by 
making business transactions fast, convenient, and tailored to the needs of the busi- 
ness partners involved. 


The explosive growth of the Internet is a revolutionary phenomenon in computing 
and telecommunications. The Internet has become the largest and most important 
network of networks today and has evolved into a global information superhighway. We 
can think of the Internet as a network made up of millions of smaller private networks, 
each with the ability to operate independent of, or in harmony with, all the other mil- 
lions of networks connected to the Internet. When this network of networks began to 
grow in December 1991, it had about 10 servers. In January 2004, the Internet was 
estimated to have more than 46 million connected servers with a sustained growth rate 
in excess of 1 million servers per month. In January 2007, the Internet was estimated 
to have more than 1 billion users with Web sites in 34 languages from English to 
Icelandic. Now that is some growth! 

The Internet is constantly expanding as more and more businesses and other or- 
ganizations and their users, computers, and networks join its global Web. Thousands 
of business, educational, and research networks now connect millions of computer 
systems and users in more than 200 countries. Internet users projected for 2010 are 
expected to top the 2 billion user mark, which still only represents approximately one- 
third of the worldwide population. Apply these numbers to Metcalfe’s law, and you can 
see that the number of possible connections is extraordinary. 

The Net doesn’t have a central computer system or telecommunications center. 
There are, however, 13 servers called root servers that are used to handle the bulk of the 
routing of traffic from one computer to another. Each message sent has a unique ad- 
dress code, so any Internet server in the network can forward it to its destination. Also, 
the Internet does not have a headquarters or governing body. International advisory 
and standards groups of individual and corporate members, such as the Internet Soci- 
ety (www.isoc.org) and the World Wide Web Consortium (www.w3.org), promote use 
of the Internet and the development of new communications standards. These com- 
mon standards are the key to the free flow of messages among the widely different 
computers and networks of the many organizations and Internet service providers (ISPs) 


in the system. 


One of the unique aspects of the Internet is that nobody really owns it. Anyone who 
can access the Internet can use it and the services it offers. Because the Internet cannot 
be accessed directly by individuals, we need to use the services of a company that spe- 
cializes in providing easy access. An ISP, or Internet service provider, is a company 
that provides access to the Internet to individuals and organizations. For a monthly 
fee, the service provider gives you a software package, user name, password, and access 
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Internet. 


phone number or access protocol. With this information (and some specialized hard- 
ware), you can then log onto the Internet, browse the World Wide Web, and send and 
receive e-mail. 

In addition to serving individuals, ISPs serve large companies, providing a direct 
connection from the company’s networks to the Internet. These ISPs themselves are 
connected to one another through network access points. Through these connections, 
one ISP can easily connect to another ISP to obtain information about the address of 
a Web site or user node. 


The most popular Internet applications are e-mail, instant messaging, browsing the 
sites on the World Wide Web, and participating in newsgroups and chat rooms. Inter- 
net e-mail messages usually arrive in seconds or a few minutes anywhere in the 
world and can take the form of data, text, fax, and video files. Internet browser soft- 
ware like Netscape Navigator and Internet Explorer enables millions of users to 
surf the World Wide Web by clicking their way to the multimedia information re- 
sources stored on the hyperlinked pages of businesses, government, and other Web 
sites. Web sites offer information and entertainment and are the launch sites for 
e-commerce transactions between businesses and their suppliers and customers. As 
we will discuss in Chapter 8, e-commerce Web sites offer all manner of products 
and services via online retailers, wholesalers, service providers, and online auctions. 
See Figure 6.5. 

The Internet provides electronic discussion forums and bulletin board systems 
formed and managed by thousands of special-interest newsgroups. You can par- 
ticipate in discussions or post messages on a myriad of topics for other users with 
the same interests. Other popular applications include downloading software and 
information files and accessing databases provided by a variety of business, gov- 
ernment, and other organizations. You can conduct online searches for information on 
Web sites in a variety of ways by using search sites and search engines such as Yahoo!, 
Google, and Fast Search. Logging on to other computers on the Internet and holding 
real-time conversations with other Internet users in chat rooms are also popular uses 
of the Internet. 


e Surf. Point-and-click your way to thousands of hyperlinked Web sites and resources 
for multimedia information, entertainment, or electronic commerce. 


e e-Mail. Use e-mail and instant messaging to exchange electronic messages with col- 
leagues, friends, and other Internet users. 


e Discuss. Participate in discussion forums of special-interest newsgroups, or hold real- 
time text conversations in Web site chat rooms. 


e Publish. Post your opinion, subject matter, or creative work to a Web site or Weblog 
for others to read. 


e Buy and Sell. Buy and sell practically anything via e-commerce retailers, wholesalers, 
service providers, and online auctions. 


e Download. Transfer data files, software, reports, articles, pictures, music, videos, and 
other types of files to your computer system. 


e Compute. Log onto and use thousands of Internet computer systems around the world. 


e Connect. Find out what friends, acquaintances, and business associates are up to. 


e Other Uses. Make long-distance phone calls, hold desktop videoconferences, listen to 
radio programs, watch television, play video games, explore virtual worlds, etc. 
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If you’re in the business of making a few million pairs of blue jeans a year, not much 
is more important than getting “blue” exactly right. It’s why a jeans designer at VF 
Corp. will express mail swatches dipped in dye back and forth with factories around 
the world as many times as necessary to make sure designers and manufacturers agree 
on just the right shade. And it’s part of the reason it takes as long as nine months to 
design a new pair of jeans and get them on the shelves. 

VE, the world’s largest apparel maker with brands such as Lee Jeans, Vanity Fair 
lingerie, and North Face outdoor gear, expects that getting new styles to shoppers 
faster will make it more competitive. To do that, it’s creating an IT platform of col- 
laborative design tools that can draw on a database of information such as material 
characteristics, costs, colors, and templates of past designs. The company has de- 
ployed the tools across its five U.S. divisions and built real-time ties to its manufac- 
turers around the world, since 90% of its manufacturing is outside the United States. 
The ability to share the information via the Internet makes it feasible for the com- 
pany to collaborate in real time with offshore factories and other supply-chain part- 
ners in fairly remote regions. 

VF believes finding a more efficient way to agree on blue, and other technology- 
enabled improvements in how it designs new products and manages logistics, could 
save it $100 million a year and cut months off the time to get a new design to market. 
“If you look at the cycle times from design to retail shelf, about two-thirds is spent in 
product development,” says Boyd Rogers, VF’s VP of supply chain and technology. 
“The new system has the potential to remove months from the production cycle, 
depending how many iterations are made to get the correct color.” 

‘Two key elements are the color-technology software from GretagMacbeth LLC 
to speed electronic collaborating on color choices and the custom-built Strategic 
Interaction Development Environment, or Stride, which contains graphic tools to 
manage garment details, a raw-materials database to house garment specifications, 
and more. 

Using the integrated systems, a design team will be able to input product ideas 
and attach a sketch or set of design specifications. If a similar design exists, the de- 
signer can save time by copying the information from another product line and reus- 
ing the template. The color-technology system will tie into the Stride system. And 
the two will let information be shared more easily—for example, in real time with 
VF's sourcing office in Hong Kong, which contracts with third-party manufacturers 
throughout Asia to sew the clothes that VF designs. In the future, VF will let raw- 
material suppliers and manufacturers connect to the Stride system for real-time 
interaction on issues related to materials and specifications. 

“We think $100 million annually over the next five years is absolutely doable,” 
Rogers says. “It’s becoming increasingly important to collaborate tightly with our 
divisions and partners around the world to cut cycle times.” 


Source: Adapted from Laurie Sullivan, “Designed to Cut Time,” InformationWeek, February 28, 2005. 


As Figure 6.6 illustrates, business use of the Internet has expanded from an electronic 
information exchange to a broad platform for strategic business applications. Notice 
how applications such as collaboration among business partners, providing customer 
and vendor support, and e-commerce have become major business uses of the Inter- 
net. Companies are also using Internet technologies for marketing, sales, and cus- 
tomer relationship management applications, as well as for cross-functional business 
applications, and applications in engineering, manufacturing, human resources, and 
accounting. Let’s look at a real-world example. 
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FIGURE 6.6 Examples of how a company can use the Internet for business. 
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The Internet provides a synthesis of computing and communication capabilities that adds 
value to every part of the business cycle. 


What business value do companies derive from their business applications on the 
Internet? Figure 6.7 summarizes how many companies perceive the business value of 
the Internet for e-commerce. Substantial cost savings can arise because applications 
that use the Internet and Internet-based technologies (like intranets and extranets) are 
typically less expensive to develop, operate, and maintain than traditional systems. For 
example, an airline saves money every time customers use its Web site instead of its 
customer support telephone system. 

It is estimated that for certain types of transactions, the transaction cost savings are 
significant for online versus more traditional channels. For example, booking a reser- 
vation over the Internet costs about 90 percent less for the airline than booking the 
same reservation over the telephone. The banking industry has also found significant 
cost savings via the Internet. A typical online banking transaction (payments, balance 
inquiry, check payment) is estimated to cost anywhere from 50 percent to 95 percent 
less than its bricks-and-mortar counterpart. 

Other primary sources of business value include attracting new customers with in- 
novative marketing and products, as well as retaining present customers with improved 
customer service and support. Of course, generating revenue through e-commerce 
applications is a major source of business value, which we will discuss in Chapter 8. To 
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summarize, most companies are building e-business and e-commerce Web sites to 
achieve six major business values: 


e Generate new revenue from online sales. 
e Reduce transaction costs through online sales and customer support. 
e Attract new customers via Web marketing and advertising and online sales. 


e Increase the loyalty of existing customers via improved Web customer service and 
support. 


e Develop new Web-based markets and distribution channels for existing products. 


e Develop new information-based products accessible on the Web. 


Many companies have sophisticated and widespread intranets, offering detailed data 
retrieval, collaboration tools, personalized customer profiles, and links to the Internet. 
Investing in the intranet, they feel, is as fundamental as supplying employees with 

a telephone. 


Before we go any further, let’s redefine the concept of an intranet, to emphasize 
specifically how intranets are related to the Internet and extranets. An intranet is a 
network inside an organization that uses Internet technologies (such as Web browsers 
and servers, TCP/IP network protocols, HTML hypermedia document publishing 
and databases, and so on) to provide an Internet-like environment within the enter- 
prise for information sharing, communications, collaboration, and the support of busi- 
ness processes. An intranet is protected by security measures such as passwords, 
encryption, and firewalls, and thus can be accessed by authorized users through the 
Internet. A company’s intranet can also be accessed through the intranets of custom- 
ers, suppliers, and other business partners via extranet links. 


Organizations of all kinds are implementing a broad range of intranet uses. One way 
that companies organize intranet applications is to group them conceptually into a few 
user services categories that reflect the basic services that intranets offer to their users. 
These services are provided by the intranet’s portal, browser, and server software, as 
well as by other system and application software and groupware that are part of a com- 
pany’s intranet software environment. Figure 6.8 illustrates how intranets provide an 
enterprise information portal that supports communication and collaboration, Web 
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publishing, business operations and management, and intranet portal management. 
Notice also how these applications can be integrated with existing IS resources and 
applications and extended to customers, suppliers, and business partners via the Inter- 
net and extranets. 


Communications and Collaboration. Intranets can significantly improve commu- 
nications and collaboration within an enterprise. For example, you can use your in- 
tranet browser and your PC or NC workstation to send and receive e-mail, voice mail, 
pages, and faxes to communicate with others within your organization, as well as ex- 
ternally through the Internet and extranets. You can also use intranet groupware fea- 
tures to improve team and project collaboration with services such as discussion 
groups, chat rooms, and audio and videoconferencing. 


Web Publishing. The advantage of developing and publishing hyperlinked multime- 
dia documents to hypermedia databases accessible on World Wide Web servers has 
moved to corporate intranets. The comparative ease, attractiveness, and lower cost of 
publishing and accessing multimedia business information internally via intranet Web 
sites have been the primary reasons for the explosive growth in the use of intranets in 
business. For example, information products as varied as company newsletters, techni- 
cal drawings, and product catalogs can be published in a variety of ways, including 
hypermedia Web pages, e-mail, and net broadcasting, and as part of in-house business 


Constellation 
Energy: Using an 
Intranet to Get 
Employees 
Working Together 
and More 
Productively 


Chapter 6 / Telecommunications and Networks @ 221 


applications. Intranet software browsers, servers, and search engines can help you eas- 
ily navigate and locate the business information you need. 


Business Operations and Management. Intranets have moved beyond merely mak- 
ing hypermedia information available on Web servers or pushing it to users via net 
broadcasting. Intranets are also being used as the platform for developing and deploy- 
ing critical business applications to support business operations and managerial deci- 
sion making across the internetworked enterprise. For example, many companies are 
developing custom applications like order processing, inventory control, sales man- 
agement, and enterprise information portals that can be implemented on intranets, 
extranets, and the Internet. Many of these applications are designed to interface with 
and access existing company databases and legacy systems. The software for such busi- 
ness uses is then installed on intranet Web servers. Employees within the company or 
external business partners can access and run such applications using Web browsers 
from anywhere on the network whenever needed. 


Intranet Portal Management. Organizations must employ IT and IS professionals 
to manage the functions of the intranet along with maintaining the various hardware 
and software components necessary for successful operations. For example, a network 
administrator must manage the access of users via passwords and other security mech- 
anisms to ensure that each user is able to use the intranet productively while simulta- 
neously protecting the integrity of the data resources. Included in this job are issues 
related to protection against unauthorized access, computer viruses, directory man- 
agement, and other highly important functions. 

Now let’s look at one company’s use of an intranet in more detail to get a better 
idea of how intranets are used in business. 


When Beth Perlman joined Constellation Energy as its CIO in 2002, employees of 
the company’s four major divisions didn’t do much communicating. “It was like four 
separate companies that never talked,” she says. 

Perlman herself had offices in two buildings, two Windows 95—based PCs that 
couldn’t access the other’s e-mail, and a BlackBerry that couldn’t syne with them. 
Constellation Energy began to standardize its 10,000 employees’ desktops in 2005, 
but that still didn’t solve a lot of its information-sharing problems. “I got sick of see- 
ing people e-mail these enormous documents” because there was no other way to 
electronically share ideas and information, Perlman laments. “It was hard to track 
versions of documents, such as when staff in different parts of the company needed 
to provide data for analyst presentations,” she says. 

What a difference a year makes! Constellation Energy in 2006 rolled out a suite of 
standardized, common collaboration tools throughout the company, installed wireless 
networks at 22 of its campuses, and redesigned its myConstellation Intranet portal. 

‘The company’s “Connect. Interact. Transform.” initiative already has tremendously 
boosted productivity and collaboration. “It was a very quick ROI [return on invest- 
ment],” Perlman notes. A big part of the payback has come from an enterprise software 
license with Microsoft that Perlman says costs “a few hundred thousand dollars,” which, 
along with the redesigned intranet portal, has contributed significantly to Constellation 
Energy’s $90 million in pretax productivity savings in 2005 and 2006. 

As part of the “Connect. Interact. Transform.” initiative, Perlman’s IT organiza- 
tion deployed Microsoft Live Meeting Web conferencing software; SharePoint, an 
information-sharing and document collaboration tool; and Windows Messenger in- 
stant messaging for use on the intranet. To date, Live Meeting has had the biggest 
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Extranets 


impact on productivity across the company, according to Perlman. More than 10,000 
hours of meetings were logged in 2005 and 2006, saving the company $41 per attendee 
in expenses and gaining an average of 98 minutes in productivity per employee. 

Now, instead of traveling to central offices for training, employees can take 
classes via their PCs or at kiosks with portal access that are set up in Constellation 
Energy’s service centers for the company’s 2,500 field, utility, and other workers who 
don’t have PCs. Through Live Meeting, everyone can see the same information at 
the same time, Perlman says, including PowerPoint presentations. The IT organiza- 
tion has found this incredibly useful in its own work. “During a meeting, IT staff can 
look at changes to code in a program and all see the same thing,” she notes. 

“We thought only a few people would use SharePoint, but now it’s being used by 
everyone. It’s really ballooned,” she comments. SharePoint provides a central loca- 
tion for documents, such as Word and Excel files, to be viewed and changed. Share- 
Point also provides version control. 

SharePoint’s deployment has allowed Kevin Hadlock, Constellation Energy’s 
director of investor relations, to spend more time analyzing data for the company’s 
earnings releases and analyst presentations, as well as hundreds of fewer hours col- 
lecting the paperwork that goes into those presentations from the company’s four 
divisions. A presentation was often revised 30-50 times before all changes were made 
manually in the final version. With SharePoint, all the information is collected 
electronically. 

“T always know what changes have been made,” says Hadlock, who says the final 
presentation material was completed at least one week earlier than in the past and 
that “the quality and accuracy of the information is greatly improved.” 

Source: Adapted from Marianne McGee, “Constellation Energy Uses IT to Get Employees Working Together and 


More Productively,” InformationWeek, September 12, 2006; and Martin Garevy, “Threats Bring IT and Operations 
Together,” InformationWeek, September 19, 2005. 


As businesses continue to use open Internet technologies [extranets] to improve communi- 
cation with customers and partners, they can gain many competitive advantages along the 
way—in product development, cost savings, marketing, distribution, and leveraging their 
partnerships. 


As we explained previously, extranets are network links that use Internet technologies 
to interconnect the intranet of a business with the intranets of its customers, suppliers, 
or other business partners. Companies can establish direct private network links 
among themselves or create private, secure Internet links called virtual private networks 
(VPNs). (We’ll look more closely at VPNs later in this chapter.) Or a company can use 
the unsecured Internet as the extranet link between its intranet and consumers and 
others but rely on the encryption of sensitive data and its own firewall systems to pro- 
vide adequate security. Thus, extranets enable customers, suppliers, consultants, sub- 
contractors, business prospects, and others to access selected intranet Web sites and 
other company databases. See Figure 6.9. 

As shown in the figure, an organization’s extranet can simultaneously link the or- 
ganization to a wide variety of external partners. Consultants and contractors can use 
the extranet to facilitate the design of new systems or provide outsourcing services. 
The suppliers of the organization can use the extranet to ensure that the raw materials 
necessary for the organization to function are in stock or delivered in a timely fashion. 
‘The customers of an organization can use the extranet to access self-service functions 
such as ordering, order status checking, and payment. The extranet links the organiza- 
tion to the outside world in a manner that improves the way it does business. 

The business value of extranets is derived from several factors. First, the Web 
browser technology of extranets makes customer and supplier access of intranet 
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FIGURE 6.9 Extranets connect the internetworked enterprise to consumers, business customers, suppliers, and 
other business partners. 
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resources a lot easier and faster than previous business methods. Second, as you will 
see in two upcoming examples, extranets enable a company to offer new kinds of 
interactive Web-enabled services to their business partners. ‘Thus, extranets are another 
way that a business can build and strengthen strategic relationships with its customers 
and suppliers. Also, extranets can enable and improve collaboration by a business with 
its customers and other business partners. Extranets facilitate an online, interactive 
product development, marketing, and customer-focused process that can bring better- 
designed products to market faster. 


Extranets: Highway engineers around the sprawling state of Texas want all the accident data 
they can get. With 800,000 crashes a year in the state, lives can be saved with a new 
left-turn lane here or a guardrail there, or perhaps a traffic light over a once-quiet 
Speeds rural intersection. Engineers need to analyze accident patterns to know where to 
Information spend limited highway-safety funds. Until 2005, however, engineers in the Depart- 
ment of Transportation’s 25 district offices could not get the data. To view accident 
records, they had to go to Austin and pore through reels of microfilm in the state 
archives, trying to find reports relevant to particular stretches of highway. Even if 
they found what they were looking for, the information was at least three years out of 
date because of the backlog of accident reports awaiting microfilming. 

That all changed in May 2005 when the state fired up its new Crash Records 
Information System with digitized police and highway patrol accident reports avail- 
able through a business intelligence extranet. Traffic engineers around the state are 
now able to access and analyze the data from their offices, equipped with nothing 
more than a browser and a password. Making reports available over the Web “will 
help us save lives,” says Carol Rawson, deputy director for traffic operations. 

Supersol, a 160-store Israeli supermarket chain, has found that sharing business 
intelligence with suppliers means fresher goods and fewer products sitting in ware- 
houses. Previously, suppliers had to visit stores and eyeball what was sitting on the 
shelves or call a Supersol purchasing manager to find out what to deliver. 


Collaboration 
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Now 10 key suppliers check stocks by tapping into Supersol’s inventory data 
warehouse to learn what the supermarket chain has in its Tel Aviv distribution center. 
The data warehouse is built on NCR’s ‘Teradata system with Panorama Software’s 
business intelligence software for accessing and analyzing information. When sup- 
pliers can see inventory data, it’s easier to eliminate out-of-stocks and overstocking. 
“The transparency of information is good for both sides,” CIO Isaac Shefer says. 

Similarly, ArvinMeritor Inc., which manufactures car parts for automakers, ser- 
vice companies such as Midas and Meinke, and retailers like AutoZone, has used an 
extranet for about 18 months to make production schedules and inventory data avail- 
able to its suppliers. They check inventory levels of the materials they supply to 
ArvinMeritor and consult production schedules to anticipate needs. 

“They have access to weekly and monthly data on what we plan to produce,” says 
CIO and senior VP Perry Lipe. “That information is extremely key to them. It’s one 
reason why our plants are on schedule and able to meet production forecasts. In ad- 
dition to helping the just-in-time manufacturing model succeed, making data avail- 
able to suppliers takes excess inventory out of the supply chain and reduces costs.” 

“Back in Texas, the Department of ‘Transportation is planning to make the Crash 
Records Information System available to the public and insurance company repre- 
sentatives who want copies of accident reports,” says Catherine Cioffi, Crash Records 
Information System’s project manager. The extranet also will be used to alert local 
law-enforcement agencies where speeding and drunken-driving offenses occur with 
greater frequency. Business intelligence extranets, says deputy director for traffic op- 
erations Rawson, “help us all do our jobs better.” 


Source: Adapted from Charles Babcock, “Collaboration Speeds Information,” InformationWeek, January 24, 2005. 
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Telecommunications Network 
Alternatives 


‘Telecommunications is a highly technical, rapidly changing field of information sys- 
tems technology. Most business professionals do not need a detailed knowledge of its 
technical characteristics. However, it is necessary that you understand some of the 
important characteristics of the basic components of telecommunications networks. 
This understanding will help you participate effectively in decision making regarding 
telecommunications alternatives. 

Read the Real World Case 2 about the impacts of videoconferencing applications 
on healthcare. We can learn a lot about the value of network-enabled applications 
from this case. See Figure 6.10. 


Figure 6.11 outlines key telecommunications component categories and examples. Re- 
member, a basic understanding and appreciation, not a detailed knowledge, is suffi- 
cient for most business professionals. 

Before we begin our discussion of telecommunications network alternatives, we 
should understand the basic components of a telecommunications network. Generally, 
a communications network is any arrangement in which a sender transmits a message to a 
receiver over a channel consisting of some type of medium. Figure 6.12 illustrates a 
simple conceptual model of a telecommunications network, which shows that it 
consists of five basic categories of components: 


e ‘Terminals, such as networked personal computers, network computers, or 
information appliances. Any input/output device that uses telecommunications 
networks to transmit or receive data is a terminal, including telephones and the 
various computer terminals that were discussed in Chapter 3. 


e ‘Telecommunications processors, which support data transmission and reception 
between terminals and computers. These devices, such as modems, switches, and 
routers, perform a variety of control and support functions in a telecommunications 
network. For example, they convert data from digital to analog and back, code and 
decode data, and control the speed, accuracy, and efficiency of the communications 
flow between computers and terminals in a network. 


e Telecommunications channels over which data are transmitted and received. 
‘Telecommunications channels may use combinations of media, such as copper 
wires, coaxial cables, or fiber-optic cables, or use wireless systems like microwave, 
communications satellite, radio, and cellular systems to interconnect the other 
components of a telecommunications network. 


e Computers of all sizes and types are interconnected by telecommunications 
networks so that they can carry out their information processing assignments. 
For example, a mainframe computer may serve as a host computer for a large 
network, assisted by a midrange computer serving as a front-end processor, while a 
microcomputer may act as a network server in a small network. 


e ‘Telecommunications control software consists of programs that control 
telecommunications activities and manage the functions of telecommunications 
networks. Examples include network management programs of all kinds, such as 
telecommunications monitors for mainframe host computers, network operating 
systems for network servers, and Web browsers for microcomputers. 


No matter how large and complex real-world telecommunications networks may 
appear to be, these five basic categories of network components must be at work to 
support an organization’s telecommunications activities. This is the conceptual frame- 
work you can use to help you understand the various types of telecommunications 
networks in use today. 
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REAL WORLD 


CASE 


n average, every 45 seconds, someone in the 

United States suffers a stroke, the third-leading 

cause of death as well as the leading cause of per- 
manent disability in the nation, according to the American 
Heart Association. 

The first three hours after a stroke are critical to a pa- 
tient’s survival and recovery. For instance, depending on the 
type of stroke suffered by a patient, certain drugs can vastly 
improve the patient’s survival and chances for full rehabilita- 
tion. Those same drugs, however, can be deadly if given to a 
patient suffering another type of stroke. Due in part to a 
shortage of specialty physicians trained to accurately diag- 
nose and treat stroke victims, not all U.S. hospitals have the 
expertise and equipment to optimally care for stroke patients, 
particularly in the critical early hours. 

The new Neuro Critical Care Center, operated by Brain 
Saving Technologies Inc. in Wellesley Hills, Massachusetts, 
will begin to connect emergency-room doctors at a number 
of suburban hospitals in the state with a remote university 
hospital that will act as a ‘hub’ with on-call critical-care neu- 
rologists who can assist in making remote diagnoses and 
treatment recommendations for suspected stroke patients, 
says Stuart Bernstein, CEO and chief operating officer at 
Brain Saving Technologies. The connection occurs through 
a visual-communication workstation that can connect via IP, 
high-bandwidth communications, or private leased line. The 
workstation allows the remote specialists to examine and talk 
to patients, and collaborate with on-site doctors to improve 
timely diagnosis of strokes and optimize treatment options, 
Bernstein says. 


FIGURE 6.10 


Information technology is changing the way 
medicine works by bringing remote patients and 
doctors together. 


Source: Kevin Maloney/The New York Times/Redux. 


Brain Saving Technologies, Inc. and 
the T-Health Institute: Medicine 
through Videoconferencing 


“Our purpose is to provide member hospitals with a ma- 
jor hospital stroke center, 24 by 7,” Bernstein says. CT 
scans—digital images of patient’s brains—can also be trans- 
mitted from the member hospitals to the Neuro Critical Care 
Center specialists to improve diagnosis of the patients, he 
says. The images are seen simultaneously by doctors at both 
locations so that they can collaborate. The technology can 
also help train emergency-room doctors about what charac- 
teristics to look for on the CT scans of stroke patients. 

A key component of the Neuro Critical Care Center’s 
offering is the Intern Tele-HealthCare Solution from Tand- 
berg, which provides simultaneous audio and video trans- 
mission and bidirectional videoconferencing and image- 
display capabilities to hub and member hospital doctors. 
Emergency-room doctors can wheel the mobile Tandberg 
system to patients’ bedsides, Bernstein says. 

‘Tandberg’s medical video-communication products are 
also used in other telehealth applications, including situations 
where doctors need an expert in sign language or a foreign 
language to communicate with patients or their family 
members, says Joe D’Iorio, Tandberg’s manager of telehealth. 
“The technology provides real-time visibility and collabora- 
tion to help assess patients’ well-being and facilitate real-time 
interaction,” he notes. 

Doctors have long had a tradition of holding “grand 
rounds” to discuss patient cases and educate aspiring physi- 
cians. The centuries-old practice certainly has its merits, but 
medical leaders in Arizona want to improve, update, and 
broaden it to include a larger list of health care practitioners. 
such as nurses and social workers, regardless of their locations. 
So the Arizona Telemedicine Program (ATP) drew on its ex- 
tensive use of videoconferencing equipment to develop the 
Institute for Advanced Telemedicine and Telehealth, or the 
‘T-Health Institute, to facilitate a 2 1st-century way of teaching 
and collaborating across disciplines and professions. 

“Tts specific mission is to use technology to permit inter- 
disciplinary team training,” explains Dr. Ronald Weinstein, 
cofounder and director of the ATP. “Now we’re opening it up 
to a far broader range of participants and patients.” The 
T-Health Institute is a division of the ATP, which Arizona law- 
makers established in 1996 as a semiautonomous entity. The 
ATP operates the Arizona Telemedicine Network, a statewide 
broadband health care telecommunications network that links 
55 independent health care organizations in 71 communities. 

Through this network, telemedicine services are pro- 
vided in 60 subspecialties, including internal medicine, sur- 
gery, psychiatry, radiology, and pathology, by dozens of 
service providers. More than 600,000 patients have received 
services over the network. 

Project leaders say the goal is to create much-needed 
discussion and collaboration among professionals in multi- 
ple health care disciplines so that they can deliver the best 
care to patients. 


“It’s the effort to be inclusive,” Weinstein says. “Medi- 
cine is quite closed and quite limited, but we’re counting on 
telecommunications to bridge some of those communication 
gaps.” The institute is essentially a teleconferencing hub that 
enables students, professors, and working professionals to 
participate in live meetings. Its technology also allows them 
to switch nearly instantly between different discussion 
groups as easily as they could if they were meeting in person 
and merely switching chairs. 

Gail Barker has noticed that participants who don’t speak 
up during in-person meetings often become much more active 
in discussions held via videoconferencing. Perhaps it’s because 
they feel less intimidated when they’re not physically 
surrounded by others or because the videoconferencing screen 
provides a buffer against criticism, says Barker, who is director 
of the T-Health Institute and a teacher at the University of 
Arizona’s College of Public Health. 

When used poorly, videoconferencing can be stiff and 
dull, just a talking head beaming out across cyberspace with- 
out any chance to engage the audience. But Barker and oth- 
ers are finding that when the technology is used in a 
thoughtful and deliberate manner, it has some advantages 
over real-life sessions because of its ability to draw more par- 
ticipants into the fray. 

“It’s literally a new method of teaching medical students. 
It’s a novel approach,” says Jim Mauger, director of engi- 
neering at Audio Video Resources Inc., a Phoenix-based 
company hired to design and install the videoconferencing 
equipment for the T-Health Institute. 

The T-Health Institute uses a Tandberg 1500 videocon- 
ferencing system, and its video wall has 12 50-inch Toshiba 
P503DL DLP Datawall RPU Video Cubes. The video wall 
itself is controlled by a Jupiter Fusion 960 Display Wall 
Processor utilizing dual Intel Xeon processors. The Fusion 
960 allows the wall to display fully movable and scalable im- 
ages from multiple PC, video, and network sources. 

Although Weinstein was able to articulate this vision of 
interprofessional interaction—that is, he could clearly lay 
out the user requirements—implementing the technology to 
support it brought challenges, IT workers say. 


CASE STUDY QUESTIONS 


1. From the perspective of a patient, how would you feel 
about being diagnosed by a doctor who could be hun- 
dreds or thousands of miles away from you? What kind 
of expectations or concerns would you have about that 
kind of experience? 


2. What other professions, aside from health care and ed- 
ucation, could benefit from application of some of the 
technologies discussed in the case? How would they 
derive business value from these projects? Develop two 
proposals. 


3. The deployment of IT in the health professions is still 
very much in its infancy. What other uses of technology 
could potentially improve the quality of health care? 
Brainstorm several alternatives. 
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Mauger says creating a videoconferencing system that 
linked multiple sites in one video wall wasn’t the challenging 
part. The real challenge was developing the technology that 
allows facilitators to move participants into separate virtual 
groups and then seamlessly switch them around. 

“The biggest challenges to making this work were the 
audio isolation among the separate conference participants 
as well as fast dynamics of switching video and moving par- 
ticipants to meetings,” he explains. He says his team also en- 
countered other challenges—ones that affect more typical 
IT projects, such as budget constraints, the need to get staff- 
ers in different cities to collaborate, and the task of translat- 
ing user requirements into actionable items. “It’s necessary 
to have someone there on-site who understands all the com- 
plex parts of the project,” he says. “Someone who is not just 
meeting with people every now and then, but someone who 
works with them on a daily basis.” 

Barker, who teaches in the College of Public Health at the 
University of Arizona and is a user of the system, led a trial- 
run training session at the T-Health amphitheater. She met 
with 13 people, including a clinical pharmacist, two family 
nurse practitioners, a senior business developer, two program 
coordinators, a diabetes program case manager, and an A/V 
telemedicine specialist. For that event, Barker says the biggest 
benefit was the time saved by having the facility in place; with- 
out the T-Health Institute, some participants would have had 
to make a four-hour round trip to attend in person. 

Now the system is opening up to others in Arizona’s 
health care and medical education communities. T-Health 
Institute officials say they see this as the first step toward a 
health care system that truly teaches its practitioners to work 
together across professional disciplines so that they can de- 
liver the best, most efficient care possible. 

“We think,” Weinstein says, “that this is the only way 
you’re going to create coordinated health care.” 


Source: Adapted from Marianne Kolbasuk McGee, “Telemedicine Improving 
Stroke Patients’ Survival and Recovery Rates,” InformationWeek, May 11, 
2005; and Mary K. Pratt, “Audiovisual Technology Enhances Physician Edu- 
cation,” Computerworld, February 16, 2009. 


REAL WORLD ACTIVITIES 


1. Technology enhances the ability of educational 
institutes to reach students across geographic bounda- 
ries. One recent development in this area is You Tube 
EDU. Go online to check out the site and prepare a re- 
port summarizing its objectives, the kind of content 
available there, and how it could be used to support tra- 
ditional modes of education delivery, such as lectures. 


2. If widely adopted, these technologies could conceivably 
lead to a concentration of specialists in a small number 
of “hub” institutions, essentially creating a two-tier 
health care system. Do you believe this would lead to an 
increase or decrease in the availability of these profes- 
sionals for patients? What could be the positive and 
negative consequences of this development? Break into 

small groups with your classmates to discuss these issues. 
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FIGURE 6.11 


Key telecommunications 
network component 
categories and examples. 


Types of 
Telecom- 
munications 
Networks 


Wide Area Networks 


Metropolitan 
Area Networks 


Network Alternative Examples of Alternatives 


Networks Internet, intranet, extranet, wide area, local area, 
client/server, network computing, peer-to-peer 

Media ‘Twisted-pair wire, coaxial cable, fiber optics, micro- 
wave radio, communications satellites, cellular and 
PCS systems, wireless mobile and LAN systems 

Processors Modems, multiplexers, switches, routers, hubs, gate- 
ways, front-end processors, private branch exchanges 

Software Network operating systems, telecommunications 
monitors, Web browsers, middleware 

Channels Analog/digital, switched/nonswitched, circuit/mes- 
sage/packet/cell switching, bandwidth alternatives 

Topology/Architecture Star, ring, and bus topologies, OSI and TCP/IP ar- 
chitectures and protocols 


Many different types of networks serve as the telecommunications infrastructure for 
the Internet and the intranets and extranets of internetworked enterprises. How- 
ever, from an end user’s point of view, there are only a few basic types, such as wide 
area and local area networks and client/server, network computing, and peer-to-peer 
networks. 


‘Telecommunications networks covering a large geographic area are called wide area 
networks (WANs). Networks that cover a large city or metropolitan area (metropolitan 
area networks) can also be included in this category. Such large networks have become 
a necessity for carrying out the day-to-day activities of many business and government 
organizations and their end users. For example, WANs are used by many multina- 
tional companies to transmit and receive information among their employees, cus- 
tomers, suppliers, and other organizations across cities, regions, countries, and the 
world. Figure 6.13 illustrates an example of a global wide area network for a major 
multinational corporation. 


When a wide area network optimized a specific geographical area, it is referred to as a 
metropolitan area network (MAN). Such networks can range from several blocks of 
buildings to entire cities. MANs can also depend on communications channels of 
moderate-to-high data rates. A MAN might be owned and operated by a single or- 
ganization, but it usually will be used by many individuals and organizations. MANs 
might also be owned and operated as public utilities. Your local cable provider or a 


FIGURE 6.12 The five basic components in a telecommunications network: (1) terminals, (2) telecommunications 
processors, (3) tele communications channels, (4) computers, and (5) telecommunications software. 
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FIGURE 6.13 A global wide area network (WAN): the Chevron MPI (Multi-Protocol Internetwork). 
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Source: Courtesy of Cisco Systems Inc. 


Local Area Networks 


Virtual 
Private Networks 


local telephone company is probably operating on a MAN. MANs will often provide 
means for internetworking of local area networks. 


Local area networks (LANs) connect computers and other information processing de- 
vices within a limited physical area, such as an office, classroom, building, manufactur- 
ing plant, or other worksite. LANs have become commonplace in many organizations 
for providing telecommunications network capabilities that link end users in offices, 
departments, and other workgroups. 

LANs use a variety of telecommunications media, such as ordinary telephone wir- 
ing, coaxial cable, or even wireless radio and infrared systems, to interconnect micro- 
computer workstations and computer peripherals. To communicate over the network, 
each PC usually has a circuit board called a network interface card. Most LANs use a 
more powerful microcomputer with a large hard disk capacity, called a file server or 
network server, that contains a network operating system program that controls 
telecommunications and the use and sharing of network resources. For example, it 
distributes copies of common data files and software packages to the other microcom- 
puters in the network and controls access to shared laser printers and other network 
peripherals. See Figure 6.14. 


Many organizations use virtual private networks (VPNs) to establish secure intranets 
and extranets. A virtual private network is a secure network that uses the Internet as its 
main backbone network but relies on network firewalls, encryption, and other security 
features of its Internet and intranet connections and those of participating organiza- 
tions. Thus, for example, VPNs would enable a company to use the Internet to estab- 
lish secure intranets between its distant branch offices and manufacturing plants and 
secure extranets between itself and its business customers and suppliers. Figure 6.15 
illustrates a VPN in which network routers serve as firewalls to screen Internet traffic 
between two companies. We will discuss firewalls, encryption, and other network se- 
curity features in Chapter 13. For the time being, we can think of a VPN as a pipe 
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FIGURE 6.14 

A local area network (LAN). 
Note how the LAN allows 
users to share hardware, 
software, and data 
resources. 


FIGURE 6.15 

An example of a virtual 
private network protected 
by network firewalls. 
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traveling through the Internet. Through this pipe, we can send and receive our data 
without anyone outside the pipe being able to see or access our transmissions. Using 
this approach, we can “create” a private network without incurring the high cost of a 
separate proprietary connection scheme. Let’s look at a real-world example about the 
use of VPN to secure remote and wireless access to sensitive data. 
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Road warriors wirelessly connect to the corporate network from hot spots at airports 
or coffee outlets. Just a few years ago, nightmare stories were common of even casual 
bystanders being able to eavesdrop on corporate communications made in such cir- 
cumstances. As a result, there’s a widespread acceptance that VPNs are pretty much 
de rigueur for wireless use on the road. 

Fast-growing, New York-based Castle Brands uses a PP'T'P-based VPN—having 
first weighed open-source and proprietary VPNs. “We tried to keep the cost down, 
without compromising security,” says director of IT Andre Preoteasa. “Throw in the 
up-front cost of some VPNs, the additional hardware, license fees and yearly support 
costs, and costs soon climb. With PPTP, if you’ve got Windows XP, you pretty much 
have it.” 

Initial access to the network is password-based, explains Preoteasa, with subse- 
quent access control following role-based rules maintained on the server in the form 
of Microsoft Active Directory. “People can’t just go anywhere and open up anything; 
the accounting guys get accounting access while the sales guys don’t,” he says. 

At London-based law firm Lawrence Graham, a combination of tokenless, two- 
factor authentication techniques help ensure secure remote VPN wireless access, 
says the firm’s IT director Jason Petrucci. 

“When lawyers log on to the system remotely from a laptop, they are presented 
with three authentication boxes: one for their username, one for their log-on pass- 
word and the last for their combined personal PIN code and passcode,” he says. 
“SecurEnvoy is used to manage and deliver this passcode by preloading three one- 
time passcodes within a text message, which is delivered to the user’s BlackBerry.” 

As passcodes are used, replacements are automatically sent to each lawyer’s Black- 
Berry. “Our lawyers carry BlackBerrys with them wherever they go. A physical token 
inevitably runs the risk of being left behind or lost altogether.” 

Meanwhile, at Fortune 50 insurance company MetLife, protecting against data 
leakage—especially in respect of client information—is of paramount importance 
when enabling remote wireless access, says Jesus Montano, assistant vice president of 
enterprise security. 

“The challenge is balancing people’s access requirements with our overall secu- 
rity requirements, and then working with them to find ways of creating an effective 
solution without compromising security,” he says. 

For wireless access from airports and coffee outlets, he explains, these days that 
means access via VPN vendor Check Point, solely from MetLife-owned laptops, with 
logons protected by RSA “hard token”—based, two-factor authentication. In addition 
to the encryption built into the VPN, all the data on the laptop is protected, he adds. 

“All wireless traffic is encrypted; the devices are encrypted and wrapped around 
with a firewall,” stresses Montano. “We think we’ve addressed the most obvious pit- 
falls in remote access, and think we’ve got a robust, highly engineered solution.” 


Source: Adapted from Malcolm Wheatley, “Wireless VPNs Protecting the Wireless Wanderer,” CSO Magazine, 
December 15, 2008. 


Client/server networks have become the predominant information architecture of en- 
terprisewide computing. In a client/server network, end-user PC or NC workstations 
are the clients. They are interconnected by local area networks and share application 
processing with network servers, which also manage the networks. (This arrangement 
of clients and servers is sometimes called a two-tier client/server architecture.) Local 
area networks (LANs) are also interconnected to other LANs and wide area networks 
(WANs) of client workstations and servers. Figure 6.16 illustrates the functions of the 
computer systems that may be in client/server networks, including optional host 
systems and superservers. 
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FIGURE 6.16 

The functions of the 
computer systems in client/ 
server networks. 


Network Computing 


FIGURE 6.17 

The functions of the 
computer systems in 
network computing. 
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A continuing trend is the downsizing of larger computer systems by replacing 
them with client/server networks. For example, a client/server network of several in- 
terconnected local area networks may replace a large mainframe-based network with 
many end-user terminals. This shift typically involves a complex and costly effort to 
install new application software that replaces the software of older, traditional main- 
frame-based business information systems, now called legacy systems. Client/server 
networks are seen as more economical and flexible than legacy systems in meeting 
end-user, workgroup, and business unit needs and more adaptable in adjusting to a 
diverse range of computing workloads. 


The growing reliance on the computer hardware, software, and data resources of 
the Internet, intranets, extranets, and other networks has emphasized that, for 
many users, “the network is the computer.” This network computing or network- 
centric concept views networks as the central computing resource of any comput- 
ing environment. 

Figure 6.17 illustrates that in network computing, network computers and other 
thin clients provide a browser-based user interface for processing small application pro- 
grams called applets. Thin clients include network computers, Net PCs, and other 
low-cost network devices or information appliances. Application and database servers 
provide the operating system, application software, applets, databases, and database 


System and Databases 
User Application and Database 
Interface Software Management 


m Network computers and 
other clients provide a 
browser-based user interface 
for applet processing. 


m Application servers 
for multi-user 
operating systems, 
Web server software, 
and application software 
applets. 


= Database servers 
for Internet/intranet 
Web databases, operational 
databases, and database 
management software. 
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FIGURE 6.18 The two major forms of peer-to-peer networks. 
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management software needed by the end users in the network. Network computing is 
sometimes called a three-tier client/server model because it consists of thin clients, ap- 
plication servers, and database servers. 


The emergence of peer-to-peer (P2P) networking technologies and applications 
for the Internet is being hailed as a development that will have a major impact on 
e-business and e-commerce and the Internet itself. Whatever the merits of such 
claims, it is clear that peer-to-peer networks are a powerful telecommunications 
networking tool for many business applications. 

Figure 6.18 illustrates two major models of peer-to-peer networking technol- 
ogy. In the central server architecture, P2P file-sharing software connects your PC 
to a central server that contains a directory of all of the other users (peers) in the 
network. When you request a file, the software searches the directory for any other 
users who have that file and are online at that moment. It then sends you a list of 
user names that are active links to all such users. Clicking on one of these user 
names prompts the software to connect your PC to that user’s PC (making a peer- 
to-peer connection) and automatically transfers the file you want from his or her 
hard drive to yours. 

‘The pure peer-to-peer network architecture has no central directory or server. 
First, the file-sharing software in the P2P network connects your PC with one of the 
online users in the network. Then an active link to your user name is transmitted from 
peer to peer to all the online users in the network that the first user (and the other 
online users) encountered in previous sessions. In this way, active links to more and 
more peers spread throughout the network the more it is used. When you request a 
file, the software searches every online user and sends you a list of active file names 
related to your request. Clicking on one of these automatically transfers the file from 
that user’s hard drive to yours. 
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One of the major advantages and limitations of the central server architecture is its 
reliance on a central directory and server. The directory server can be slowed or over- 
whelmed by too many users or technical problems. However, it also provides the network 
with a platform that can better protect the integrity and security of the content and users 
of the network. Some applications of pure P2P networks, in contrast, have been plagued 
by slow response times and bogus and corrupted files. 

The Internet, as originally conceived in the late 1960s, was a peer-to-peer system. 
The goal of the original ARPANET (the name of the early version of today’s Internet) 
was to share computing resources around the United States. The challenge for this 
effort was to integrate different kinds of existing networks, as well as future technolo- 
gies, with one common network architecture that would allow every host to be an 
equal player. The first few hosts on the ARPANET (e.g., UCLA and the University of 
Utah) were already independent computing sites with equal status. The ARPANET 
connected them together not in a master/slave or client/server relationship, but rather 
as equal computing peers. 

One common use for peer-to-peer networks today is the downloading and trading 
of files. When the term peer-to-peer was used to describe the Napster network, it im- 
plied that the peer protocol nature was important, but in reality the unique achieve- 
ment of Napster was the empowerment of the peers (i.e., the fringes of the network) 
in association with a central index that made it fast and efficient to locate available 
content. The peer protocol was just a common way to achieve this. 

Although much media attention has focused on copyright-infringing uses of file 
trading networks, there are vast numbers of entirely noninfringing uses. BitTorrent 
was originally designed to keep sites from getting overwhelmed by “flash crowds” 
and heavy traffic. That makes it very suitable for many situations in which there are 
massive peaks of demand. Most Linux distributions are released via BitTorrent 
to help with their bandwidth needs. Another example is Blizzard Entertainment 
(http://www.blizzard.com), which uses a modified version of BitTorrent to distrib- 
ute patches to its game World of Warcraft (http://www.worldofwarcraft.com). 
Users have often complained about BitTorrent due to a bandwidth cap that almost 
defeats its purpose. 

Other peer-to-peer networks are emerging as well, such as PeerCast, which allows 
someone to broadcast an Internet radio or television station with very little upstream 
bandwidth due to its distributed nature. Other peer-to-peer broadcast tools, some- 
times called peer-casting, include the IceShare project and FreeCust. 


We regularly hear the words analog and digital associated with computers, telephones, 
and other hardware devices. To be sure you understand exactly what these terms mean, 
a short discussion may be helpful. 

Basically, analog or digital refers to the method used to convert information into 
an electrical signal. Telephones, microphones, measuring instruments, vinyl record 
players, CD players, tape decks, computers, fax machines, and so on must convert in- 
formation into an electrical signal in some manner so that it can be transmitted or 
processed. For example, a microphone must convert the pressure waves that we call 
sound into a corresponding electrical voltage or current, which can be sent down a 
telephone line, amplified in a sound system, broadcast on the radio, and/or recorded 
on some medium. 

In an analog system, an electrical voltage or current is generated that is propor- 
tional to the quantity being observed. In a digital system, the quantity being observed 
is expressed as a number. This is really all there is to it, but a few details must still be 
discussed. 

For example, in an electronic analog thermometer, if the temperature being 
measured is 83 degrees, then the analog system would put out, for example, 83 volts. 
This level could just as well be 8.3 volts or any other voltage proportional to the 
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temperature. Thus, if the temperature doubled to 166 degrees, the output voltage 
would double to 166 volts (or perhaps 16.6 volts if the instrument were so scaled). 
The output voltage is, therefore, “analogous” to the temperature—thus the use of 
the term analog. 

In the case of an electronic digital thermometer, however, the output would be the 
number 83 if the temperature were 83 degrees. Hence it is based on “digits.” The only 
thing wrong with this example is that 83 is a decimal number constructed from the 10 
symbols 0, 1, 2,..., 8, 9. We commonly use 10 symbols in our numbers for historical 
reasons; it is probably because we have 10 fingers. It is inconvenient, however, to use 
10 symbols to express the output as an electrical voltage. It is much more convenient 
to have only 2 symbols, 0 and 1. In this case, for example, 0 could be represented by 
0 volts, and 1 by 5 volts. Recall from Chapter 3 that this system is known as a binary 
(only two symbols) number system, but the principle is still the same: The output of 
the digital thermometer is a number, that is, “digits.” 

For the thermometer example above, 83 is the binary number 1010011. The elec- 
tronic thermometer would send the sequence 5 volts, 0 volts, 5 volts, 0 volts, 0 volts, 
5 volts, and 5 volts to express the number 83 in binary. 

A digital system may seem more complicated than an analog system, but it has a 
number of advantages. The principal advantage is that once the measurement is ex- 
pressed in digital form, it can be entered into a computer or a microprocessor and 
manipulated as desired. If we worked with only analog devices, we would eventually 
have to convert the output of the analog device into digital form if we wanted to input 
it into a computer. Because computer networks work primarily with digital signals, 
most of the hardware used by a computer network is digital. 


‘Telecommunications channels make use of a variety of telecommunications media. 
These include twisted-pair wire, coaxial cables, and fiber-optic cables, all of which 
physically link the devices in a network. Also included are terrestrial microwave, com- 
munications satellites, cellular phone systems, and packet and LAN radio, all of which 
use microwave and other radio waves. In addition, there are infrared systems, which 
use infrared light to transmit and receive data. See Figure 6.19. 


FIGURE 6.19 Common telecommunications guided media: (a) twisted-pair wire, (b) coaxial cable, and (c) fiber-optic cable. 


(O) 
Source: © Photodisc/PunchStock. 


(a) 
Source: Phil Degginger/Getty Images. 


(b) 
Source: Ryan McVay/Getty Images. 
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Ordinary telephone wire, consisting of copper wire twisted into pairs (twisted-pair 
wire), is the most widely used medium for telecommunications. These lines are used 
in established communications networks throughout the world for both voice and data 
transmission. Iwisted-pair wiring is wrapped or shielded in a variety of forms and used 
extensively in home and office telephone systems and many local area networks and 
wide area networks. ‘Transmission speeds can range from 2 million bits per second 
(unshielded) to 100 million bits per second (shielded). 


Coaxial cable consists of a sturdy copper or aluminum wire wrapped with spacers to 
insulate and protect it. The cable’s cover and insulation minimize interference and 
distortion of the signals the cable carries. Groups of coaxial cables may be bundled 
together in a big cable for ease of installation. These high-quality lines can be placed 
underground and laid on the floors of lakes and oceans. They allow high-speed 
data transmission (from 200 million to more than 500 million bits per second—200- 
500 Mbps) and are used instead of twisted-pair wire lines in high-service metropolitan 
areas, for cable television systems, and for short-distance connections of computers 
and peripheral devices. Coaxial cables are also used in many office buildings and other 
worksites for local area networks. 


Fiber optics uses cables consisting of one or more hair-thin filaments of glass fiber 
wrapped in a protective jacket. They can conduct pulses of visible light elements (pho- 
tons) generated by lasers at transmission rates as high as trillions of bits per second 
(terabits per second, or Tbps). This speed is hundreds of times faster than coaxial ca- 
ble and thousands of times better than twisted-pair wire lines. Fiber-optic cables pro- 
vide substantial size and weight reductions as well as increased speed and greater 
carrying capacity. A half-inch-diameter fiber-optic cable can carry more than 500,000 
channels, compared with about 5,500 channels for a standard coaxial cable. 

Fiber-optic cables are not affected by and do not generate electromagnetic radia- 
tion; therefore, multiple fibers can be placed in the same cable. Fiber-optic cables have 
less need for repeaters for signal retransmissions than copper wire media. Fiber optics 
also has a much lower data error rate than other media and is harder to tap than elec- 
trical wire and cable. Fiber-optic cables have already been installed in many parts 
of the world, and they are expected to replace other communications media in many 
applications. 

New optical technologies such as dense wave division multiplexing (DWDM) can 
split a strand of glass fiber into 40 channels, which enables each strand to carry 5 mil- 
lion calls. In the future, DWDM technology is expected to split each fiber into 1,000 
channels, enabling each strand to carry up to 122 million calls. In addition, newly de- 
veloped optical routers will be able to send optical signals up to 2,500 miles without 
needing regeneration, thus eliminating the need for repeaters every 370 miles to re- 
generate signals. 


While on the subject of telecommunication media, we need to understand a pervasive 
problem in the telecommunications industry: the problem of the last mile. The last- 
mile problem, while simple to understand, is still one of the greatest challenges faced 
by telecommunications providers. 

The basic problem goes something like this: The telecommunications provider 
adopts a new, faster, better technology that can provide higher bandwidths and faster 
telecommunication speeds to consumers. A good example of this type of situation is 
the invention of fiber-optic cable and its related optical technologies. Fiber can move 
data at lightning speed and handle a much larger volume of data than the more typical 
twisted-pair wiring commonly found in households. So the telecommunications pro- 
vider completely reengineers the network and begins laying fiber instead of copper 
wire in trenches. The fiber, costing $500,000 to $1 million per mile, begins bringing 
all of its faster, better, and cheaper benefits to the front door of the consumer. This is 
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where the last-mile problem begins. Out in front of the house lies enough bandwidth 
to handle more than 100 million telephone calls or download entire movies in a few 
seconds. The problem is that the house it is connecting to is wired with twisted-pair 
wiring that just cannot handle the bandwidth provided by fiber. This situation is anal- 
ogous to hooking up a garden hose to the water volume generated by Niagara Falls. At 
the end of the day, the amount of water you get is whatever will come out of the gar- 
den hose and nothing more. Therefore, the problem is more than just the cost. In 
many cases, the wiring in a structure cannot be upgraded and the bandwidth right 
outside the door just cannot be accessed. 

Many methods have been offered to solve the last-mile problem. Cable companies 
are providing a single-wire solution to many modern households. By using sophisti- 
cated technologies, they can bring cable television, Internet access, and telephone 
services into a home using only the coaxial wire originally put there for cable televi- 
sion. Other solutions include bypassing the old wired network completely and provid- 
ing high-speed services via a satellite or other wireless approach. Regardless of the 
solution, the problem of the last mile is still very much an issue to consider when de- 
signing a telecommunications network. 

Although still in the developmental stages, one solution to the last mile problem 
may be WiMax. Defined as Worldwide Interoperability for Microwave Access, WiMax is 
intended to provide high-speed, mobile telecommunications services to diverse Inter- 
net connections and locations. There are still many issues to work out regarding 
WiMax, but it looks like we may be able to solve the problem of last mile connectivity 
somewhere in the near future. 


Wireless telecommunications technologies rely on radio wave, microwave, infrared, 
and visible light pulses to transport digital communications without wires between 
communications devices. Wireless technologies include terrestrial microwave, com- 
munications satellites, cellular and PCS telephone and pager systems, mobile data ra- 
dio, wireless LANs, and various wireless Internet technologies. Each technology 
utilizes specific ranges within the electromagnetic spectrum (in megahertz) of electro- 
magnetic frequencies that are specified by national regulatory agencies to minimize 
interference and encourage efficient telecommunications. Let’s briefly review some of 
these major wireless communications technologies. 


Terrestrial microwave involves earthbound microwave systems that transmit high- 
speed radio signals in a line-of-sight path between relay stations spaced approximately 
30 miles apart. Microwave antennas are usually placed on top of buildings, towers, 
hills, and mountain peaks, and they are a familiar sight in many sections of the coun- 
try. They are still a popular medium for both long-distance and metropolitan area 
networks. 


Communications satellites also use microwave radio as their telecommunications me- 
dium. Typically, high-earth orbit (HEO) communications satellites are placed in sta- 
tionary geosynchronous orbits approximately 22,000 miles above the equator. Satellites 
are powered by solar panels and can transmit microwave signals at a rate of several 
hundred million bits per second. They serve as relay stations for communications sig- 
nals transmitted from earth stations. Earth stations use dish antennas to beam micro- 
wave signals to the satellites that amplify and retransmit the signals to other earth 
stations thousands of miles away. 

Whereas communications satellites were used initially for voice and video trans- 
mission, they are now also used for high-speed transmission of large volumes of data. 
Because of time delays caused by the great distances involved, they are not suitable for 
interactive, real-time processing. Communications satellite systems are operated by 
several firms, including Comsat, American Mobile Satellite, and Intellsat. 
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Various other satellite technologies are being implemented to improve global busi- 
ness communications. For example, many companies use networks of small satellite 
dish antennas known as VSAT (very small aperture terminal) to connect their stores 
and distant worksites via satellite. Other satellite networks use many low-earth orbit 
(LEO) satellites orbiting at an altitude of only 500 miles above the earth. Companies 
like Globalstar offer wireless phone, paging, and messaging services to users anywhere 
on the globe. Let’s look at a real-world example. 


Faced with extremely remote desert locations and a complete lack of network infra- 
structure across the stark landscape, IT workers with the Nevada Department of 
Corrections needed to connect 24 prison facilities around the state. 

Their initial plan seemed simple: Deploy a new, Web-based prison management 
application to all 24 prison facilities to replace a 20-year-old DOS screen application. 
After researching options, the IT team eventually settled on a satellite-based net- 
work combined with a key add-on: WAN acceleration appliances from Blue Coat 
Systems Inc. that could drastically reduce debilitating delays in transmitting data to 
a satellite and then back to Earth. 

Once the system is up and running, inmate information can be kept up to date 
around the clock. With the old system, data could be as much as 72 hours old, a po- 
tential security issue. The hard part was cobbling together a network that allowed 
NOTIS (the Nevada Offender Tracking Information System) to function properly. 
With an almost one-second delay in each direction for every single element on a 
Web page, load times were unacceptable. Opening a Web page “could take you min- 
utes,” says Dan O’Barr, infrastructure architect for the corrections department. 
“With a real-time application, it would completely break it—it will fall apart. It was 
essentially unusable.” ‘The satellite system was the only workable option, but data 
transmission delays threw a wrench into the rollout. “They’re extremely remote 
areas—there’s a whole lot of nothing in every direction there,” O’Barr says of the 
state’s prisons. “T1 was not a possibility, regardless of money. There was no other 
technology available to link them.” 

IT workers in the department began to search the Internet for answers and dis- 
covered WAN acceleration vendors, including Blue Coat in Seattle. The Blue Coat 
SG appliances, which securely accelerate the delivery of corporate applications while 
reducing bandwidth usage, initially dropped the satellite delay to under eight seconds 
for each Web page, O’Barr says. 

The Blue Coat technology also gives the Nevada prison system another option in 
the future: the ability to enable acceleration for mobile devices without added ex- 
penses, says Robert Whiteley of Forrester Research. “The killer in satellite networks 
is latency, the delay it takes to transfer data,” he says. “Blue Coat accelerates it and 
makes it work.” 


Source: Adapted from Todd Weiss, “Nevada Prison Looks to WAN Acceleration for IT Upgrade,” Computerworld, 
May 29, 2007. 


Cellular and PCS telephone and pager systems use several radio communications 
technologies. However, all of them divide a geographic area into small areas, or cells, 
typically from one to several square miles in area. Each cell has its own low-power 
transmitter or radio relay antenna device to relay calls from one cell to another. Com- 
puters and other communications processors coordinate and control the transmissions 
to and from mobile users as they move from one area to another. 

Cellular phone systems have long used analog communications technologies oper- 
ating at frequencies in the 800-900 MHz cellular band. Newer cellular systems use 
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digital technologies, which provide greater capacity and security, and additional ser- 
vices such as voice mail, paging, messaging, and caller ID. These capabilities are also 
available with PCS (personal communications services) phone systems. PCS operates 
at 1,900 MHz frequencies using digital technologies that are related to digital cellular. 
However, PCS phone systems cost substantially less to operate and use than cellular 
systems and have lower power consumption requirements. 


Wiring an office or a building for a local area network is often a difficult and costly 
task. Older buildings frequently do not have conduits for coaxial cables or additional 
twisted-pair wire, and the conduits in newer buildings may not have enough room to 
pull additional wiring through. Repairing mistakes in and damage to wiring is often 
difficult and costly, as are major relocations of LAN workstations and other compo- 
nents. One solution to such problems is installing a wireless LAN using one of several 
wireless technologies. Examples include a high-frequency radio technology similar to 
digital cellular and a low-frequency radio technology called spread spectrum. 

The use of wireless LANs is growing rapidly as new high-speed technologies are 
implemented. A prime example is a new open-standard wireless radio-wave technol- 
ogy technically known as IEEE 802.11b, or more popularly as Wi-Fi (for wireless 
fidelity). Wi-Fi is faster (11 Mbps) and less expensive than standard Ethernet and other 
common wire-based LAN technologies. Thus, Wi-Fi wireless LANs enable laptop 
PCs, PDAs, and other devices with Wi-Fi modems to connect easily to the Internet 
and other networks in a rapidly increasing number of business, public, and home envi- 
ronments. A faster version (802.11g) with speeds of 54 Mbps promises to make this 
technology even more widely used. By December 2009, the newest version 802.11n is 
expected to be finalized. This new standard offers speeds of up to 108 Mbps. 


A short-range wireless technology called Bluetooth is rapidly being built into comput- 
ers and other devices. Bluetooth serves as a cable-free wireless connection to periph- 
eral devices such as computer printers and scanners. Operating at approximately 1 Mbps 
with an effective range from 10 to 100 meters, Bluetooth promises to change signifi- 
cantly the way we use computers and other telecommunication devices. 

‘To appreciate fully the potential value of Bluetooth, look around the space where 
you have your computer. You have your keyboard connected to the computer, as well as 
a printer, pointing device, monitor, and so on. What joins these together are their as- 
sociated cables. Cables have become the bane of many offices and homes. Many of us 
have experienced trying to figure out what cable goes where and getting tangled up in 
the details. Bluetooth essentially aims to fix this; it is a cable-replacement technology. 

Conceived initially by Ericsson and later adopted by a myriad of other companies, 
Bluetooth is a standard for a small, cheap radio chip to be plugged into computers, 
printers, mobile phones, and so forth. A Bluetooth chip is designed to replace cables 
by taking the information normally carried by the cable and transmitting it at a special 
frequency to a receiver Bluetooth chip, which will then give the information received 
to the computer, telephone, printer, or other Bluetooth device. Given its fairly low 
cost to implement, Bluetooth is set to revolutionize telecommunications. 


Wireless access to the Internet, intranets, and extranets is growing as more Web-enabled 
information appliances proliferate. Smart telephones, pagers, PDAs, and other portable 
communications devices have become very thin clients in wireless networks. Agreement on 
a standard wireless application protocol (WAP) has encouraged the development of many 
wireless Web applications and services. The telecommunications industry continues to 
work on third-generation (3G) wireless technologies whose goal is to raise wireless trans- 
mission speeds to enable streaming video and multimedia applications on mobile devices. 

For example, the Smartphone, a PCS phone, can send and receive e-mail and provide 
Web access via a “Web clipping” technology that generates custom-designed Web pages 
from many popular financial, securities, travel, sport, entertainment, and e-commerce 
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FIGURE 6.20 The Wireless Application Protocol (WAP) architecture for wireless Internet services to mobile 


information appliances. 
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Web sites. Another example is the Sprint PCS Wireless Web phone, which delivers simi- 
lar Web content and e-mail services via a Web-enabled PCS phone. 

Figure 6.20 illustrates the wireless application protocol that is the foundation of 
wireless mobile Internet and Web applications. The WAP standard specifies how Web 
pages in HTML or XML are translated into a wireless markup language (WML) by 
filter software and preprocessed by proxy software to prepare the Web pages for wire- 
less transmission from a Web server to a Web-enabled wireless device. 


UPS is a global company with one of the most recognized and admired brand names 
in the world. It has become the world’s largest package delivery company and a lead- 
ing global provider of specialized transportation and logistics services. Every day 
UPS manages the flow of goods, funds, and information in more than 200 countries 
and territories worldwide. A technology-driven company, UPS has more than 
260,000 PCs, 6,200 servers, 2,700 midrange computers, and 14 mainframes. This 
technology infrastructure is in place to handle the delivery and pickup of more than 
3.4 billion packages and documents per year, as well as the 115 million hits per day 
on its Web site, of which more than 9 million hits are tracking requests. 

‘To manage all this mobile commerce (m-commerce) information, Atlanta-based 
UPS uses wireless as part of UPScan, a companywide, global initiative to streamline 
and standardize all scanning hardware and software used in its package distribution 
centers. For package tracking, UPScan consolidates multiple scanning applications 
into one wireless LAN application while it maintains interfaces with critical control 
and repository systems. 

UPScan uses Bluetooth, a short-range wireless networking protocol for commu- 
nications with cordless peripherals (such as ring-mounted wireless manual scanners) 
linked to wireless LANs, which communicate with corporate systems. UPS has also 
developed application programming interfaces (APIs) in-house to link its legacy 
tracking systems to business customers, such as retailers who want to provide order 
status information on their Web sites from UPS to their customers. 

Source: Adapted from UPS Corporate Web Site, “About UPS,” http://www.ups.com/content/us/en/about/index.html, 


n.d.; and Dan Farber, “UPS Takes Wireless to the Next Level,” ZDNet Tech Update, http://techupdate.zdnet.com/ 
techupdate/stories/main/0,14179,2913461,00.html, February 19, 2007. 
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Telecommunications processors such as modems, multiplexers, switches, and routers 
perform a variety of support functions between the computers and other devices in a 
telecommunications network. Let’s take a look at some of these processors and their 
functions. See Figure 6.21. 


Modems are the most common type of communications processor. They convert the 
digital signals from a computer or transmission terminal at one end of a communica- 
tions link into analog frequencies that can be transmitted over ordinary telephone 
lines. A modem at the other end of the communications line converts the transmitted 
data back into digital form at a receiving terminal. This process is known as modulation 
and demodulation, and the word modem is a combined abbreviation of those two words. 
Modems come in several forms, including small stand-alone units, plug-in circuit 
boards, and removable modem cards for laptop PCs. Most modems also support a 
variety of telecommunications functions, such as transmission error control, automatic 
dialing and answering, and a faxing capability. As shown in Figure 6.21, a modem is 
used in the private-home setting to accept the data from the Internet provider and 
convert it to input for a PC. 

Modems are used because ordinary telephone networks were first designed to 
handle continuous analog signals (electromagnetic frequencies), such as those gener- 
ated by the human voice over the telephone. Because data from computers are in 
digital form (voltage pulses), devices are necessary to convert digital signals into ap- 
propriate analog transmission frequencies and vice versa. However, digital communi- 
cations networks that use only digital signals and do not need analog/digital 
conversion are becoming commonplace. Because most modems also perform a vari- 
ety of telecommunications support functions, devices called digital modems are still 
used in digital networks. 


Examples of some of the communications processors involved in an Internet connection. 
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FIGURE 6.22 
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DSL (Digital Subscriber Line) 


Modem (56 Kbps) Modem 

e Receives at 56 Kbps e Receives at 1.5 Mbps to 5.0 Mbps 

e Sends at 33.6 Kbps e Sends at 128 Kbps to 640 Kbps 

e Slowest technology e Users must be near switching centers 


ISDN (Integrated Services 


Digital Network) Cable Modem 

e Sends and receives at 128 Kbps e Receives at 1.5 Mbps to 20 Mbps 

e Users need extra lines e Sends at 128 Kbps to 2.5 Mbps 

e Becoming obsolete e Speed degrades with many local users 
Home Satellite Local Microwave 

e Receives at 400 Kbps e Sends and receives at 512 Kbps to 1.4 Mbps 
e Sends via phone modem e Higher cost 

e Slow sending, higher cost e May require line of sight to base antenna 


Figure 6.22 compares several modem and telecommunications technologies for 
access to the Internet and other networks by home and business users. 


‘Telecommunications networks are interconnected by special-purpose communica- 
tions processors called internetwork processors, such as switches, routers, hubs, 
and gateways. A switch is a communications processor that makes connections be- 
tween telecommunications circuits in a network. Switches are now available in 
managed versions with network management capabilities. A bridge is a device that 
connects two or more local area networks that use the same communications rules 
or protocol. In contrast, a router is an intelligent communications processor that in- 
terconnects networks based on different rules or protocols, so a telecommunications 
message can be routed to its destination. A hub is a port-switching communications 
processor. Advanced versions of both hubs and switches provide automatic switch- 
ing among connections called ports for shared access to a network’s resources. 
Workstations, servers, printers, and other network resources are typically con- 
nected to ports. Networks that use different communications architectures are in- 
terconnected by using a communications processor called a gateway. All these 
devices are essential to providing connectivity and easy access between the multiple 
LANs and wide area networks that are part of the intranets and client/server net- 
works in many organizations. 

Again referring to Figure 6.21, we can see examples of all of these elements. The 
corporate local area network in the upper left of the figure uses a hub to connect its 
multiple workstations to the network switch. The switch sends the signals to a series 
of switches and routers to get the data to their intended destination. 


A multiplexer is a communications processor that allows a single communications 
channel to carry simultaneous data transmissions from many terminals. This process 
is accomplished in two basic ways. In frequency division multiplexing (FDM), a multi- 
plexer effectively divides a high-speed channel into multiple slow-speed channels. In 
time division multiplexing (TDM), the multiplexer divides the time each terminal can 
use the high-speed line into very short time slots, or time frames. 

For example, if we need to have eight telephone numbers for a small business, we 
could have eight individual lines come into the building—one for each telephone 
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number. Using a digital multiplexer, however, we can have one line handle all eight 
telephone numbers (assuming we have an eight-channel multiplexer). Mutliplexers 
work to increase the number of transmissions possible without increasing the number 
of physical data channels. 


Telecommunications software is a vital component of all telecommunications net- 
works. Telecommunications and network management software may reside in PCs, 
servers, mainframes, and communications processors like multiplexers and routers. 
Network servers and other computers in a network use these programs to manage 
network performance. Network management programs perform functions such as au- 
tomatically checking client PCs for input/output activity, assigning priorities to data 
communications requests from clients and terminals, and detecting and correcting 
transmission errors and other network problems. 

For example, mainframe-based wide area networks frequently use telecommunica- 
tions monitors or teleprocessing (TP) monitors. The CICS (Customer Identification 
Control System) for IBM mainframes is a typical example. Servers in local area and 
other networks frequently rely on network operating systems like Novell NetWare or 
operating systems like UNIX, Linux, or Microsoft Windows 2008 Servers for network 
management. Many software vendors also offer telecommunications software as mid- 
dleware, which can help diverse networks communicate with one another. 

‘Telecommunications functions built into Microsoft Windows and other operating 
systems provide a variety of communications support services. For example, they work 
with a communications processor (such as a modem) to connect and disconnect com- 
munications links and to establish communications parameters such as transmission 
speed, mode, and direction. 


Network management packages such as network operating systems and telecommunica- 
tions monitors determine transmission priorities, route (switch) messages, poll termi- 
nals in the network, and form waiting lines (queues) of transmission requests. They 
also detect and correct transmission errors, log statistics of network activity, and pro- 
tect network resources from unauthorized access. See Figure 6.23. 
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Examples of major network management functions include the following: 


e Traffic Management. Manage network resources and traffic to avoid congestion 
and optimize telecommunications service levels to users. 


e Security. Provide security as one of the top concerns of network management 
today. Telecommunications software must provide authentication, encryption, 
firewall, and auditing functions, and enforce security policies. Encryption, fire- 
walls, and other network security defenses are covered in Chapter 11. 


e Network Monitoring. Troubleshoot and watch over the network, informing 
network administrators of potential problems before they occur. 


e Capacity Planning. Survey network resources and traffic patterns and users’ 
needs to determine how best to accommodate the needs of the network as it 
grows and changes. 


There are several basic types of network topologies, or structures, in telecommunica- 
tions networks. Figure 6.24 illustrates three basic topologies used in wide area and 
local area telecommunications networks. A star network ties end-user computers to a 
central computer. A ring network ties local computer processors together in a ring on 
a more equal basis. A bus network is a network in which local processors share the 
same bus, or communications channel. A variation of the ring network is the mesh 
network. It uses direct communications lines to connect some or all of the computers 
in the ring to one another. 

Wired networks may use a combination of star, ring, and bus approaches. Obvi- 
ously, the star network is more centralized, whereas ring and bus networks have a 
more decentralized approach. However, this is not always the case. For example, the 
central computer in a star configuration may be acting only as a switch, or message- 
switching computer that handles the data communications between autonomous local 
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computers. Star, ring, and bus networks differ in their performance, reliability, and 
cost. A pure star network is considered less reliable than a ring network, because the 
other computers in the star are heavily dependent on the central host computer. If it 
fails, there is no backup processing and communications capability, and the local com- 
puters are cut off from one another. Therefore, it is essential that the host computer 
be highly reliable. Having some type of multiprocessor architecture to provide a fault- 
tolerant capability is a common solution. 


Until quite recently, sufficient standards were lacking for the interfaces among the 
hardware, software, and communications channels of telecommunications networks. 
This situation hampered the use of telecommunications, increased its costs, and re- 
duced its efficiency and effectiveness. In response, telecommunications manufacturers 
and national and international organizations have developed standards called protocols 
and master plans called network architectures to support the development of advanced 
data communications networks. 


A protocol is a standard set of rules and procedures for the control of communications 
in a network. However, these standards may be limited to just one manufacturer’s 
equipment or just one type of data communications. Part of the goal of communica- 
tions network architectures is to create more standardization and compatibility among 
communications protocols. One example of a protocol is a standard for the physical 
characteristics of the cables and connectors between terminals, computers, modems, 
and communications lines. Other examples are the protocols that establish the com- 
munications control information needed for handshaking, which is the process of ex- 
changing predetermined signals and characters to establish a telecommunications 
session between terminals and computers. Other protocols deal with control of data 
transmission reception in a network, switching techniques, internetwork connections, 
and so on. 


The goal of network architectures is to promote an open, simple, flexible, and efficient 
telecommunications environment, accomplished by the use of standard protocols, 
standard communications hardware and software interfaces, and the design of a stand- 
ard multilevel interface between end users and computer systems. 


The Open Systems Interconnection (OSI) model is a standard description or “refer- 
ence model” for how messages should be transmitted between any two points in a 
telecommunications network. Its purpose is to guide product implementers so that 
their products will consistently work with other products. The reference model de- 
fines seven layers of functions that take place at each end of a communication. 
Although OSI is not always strictly adhered to in terms of keeping related functions 
together in a well-defined layer, many, if not most, products involved in telecommuni- 
cations make an attempt to describe themselves in relation to the OSI model. It is also 
valuable as a view of communication that furnishes a common ground for education 
and discussion. 

Developed by representatives of major computer and telecommunication compa- 
nies beginning in 1983, OSI was originally intended to be a detailed specification of 
interfaces. Instead, the committee decided to establish a common reference model for 
which others could develop detailed interfaces that in turn could become standards. 
OSI was officially adopted as an international standard by the International Organiza- 
tion of Standards (ISO). 

The main idea in OSI is that the process of communication between two endpoints 
in a telecommunication network can be divided into layers, with each layer adding its 
own set of special, related functions. Each communicating user or program is at a com- 
puter equipped with these seven layers of functions. So in a given message between 
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users, there will be a flow of data through each layer at one end down through the lay- 
ers in that computer; at the other end, when the message arrives, there will be another 
flow of data up through the layers in the receiving computer and ultimately to the end 
user or program. The actual programming and hardware that furnishes these seven lay- 
ers of functions is usually a combination of the computer operating system, applications 
(e.g., your Web browser), TCP/IP or alternative transport and network protocols, and 
the software and hardware that enable you to put a signal on one of the lines attached 
to your computer. 

OSI divides telecommunication into seven layers. Figure 6.25 illustrates the func- 
tions of the seven layers of the OSI model architecture. 

The layers consist of two groups. The upper four layers are used whenever a 
message passes to or from a user. The lower three layers (up to the network layer) 
are used when any message passes through the host computer. Messages intended 
for this computer pass to the upper layers. Messages destined for some other host 
are not passed to the upper layers but are forwarded to another host. The seven 
layers are: 


Layer 1: The physical layer. This layer conveys the bit stream through the net- 
work at the electrical and mechanical level. It provides the hardware means of 
sending and receiving data on a carrier. 

Layer 2: The data link layer. This layer provides synchronization for the physi- 
cal level and does bit-stuffing for strings of 1’s in excess of 5. It furnishes trans- 
mission protocol knowledge and management. 


Layer 3: The network layer. This layer handles the routing of the data (sending 
it in the right direction to the right destination on outgoing transmissions and 


FIGURE 6.25 The seven layers of the OSI communications network architecture, and the five layers of the Internet’s 


TCP/IP protocol suite. 
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receiving incoming transmissions at the packet level). The network layer does 
routing and forwarding. 


Layer 4: The transport layer. This layer manages the end-to-end control (e.g., 
determining whether all packets have arrived) and error-checking. It ensures 
complete data transfer. 


Layer 5: The session layer. This layer sets up, coordinates, and terminates 
conversations, exchanges, and dialogues between the applications at each end. 
It deals with session and connection coordination. 


Layer 6: The presentation layer. This layer, usually part of an operating 
system, converts incoming and outgoing data from one presentation format to 
another (e.g., from a text stream into a pop-up window with the newly arrived 
text). It’s sometimes called the syntax layer. 


Layer 7: The application layer. At this layer, communication partners are 
identified, quality of service is identified, user authentication and privacy are 
considered, and any constraints on data syntax are identified. (This layer is not 
the application itself, although some applications may perform application layer 
functions.) 


The Internet uses a system of telecommunications protocols that has become so widely 
used that it is now accepted as a network architecture. The Internet’s protocol suite is 
called Transmission Control Protocol/Internet Protocol and is known as TCP/IP. 
As Figure 6.25 shows, TCP/IP consists of five layers of protocols that can be related 
to the seven layers of the OSI architecture. TCP/IP is used by the Internet and by all 
intranets and extranets. Many companies and other organizations are thus converting 
their client/server and wide area networks to TCP/IP technology, which are now 
commonly called IP networks. 

Although many of the technical aspects of the Internet can appear quite complex, the 
addressing, routing, and transport protocols, which make sure you get to the right Web 
site or your e-mail is delivered to the right place, are actually elegantly simple. TCP/IP 
can be thought of as analogous to how the postal system finds your house and delivers 
your mail. In this analogy, TCP represents the postal system and the various processes 
and protocols used to move the mail, while IP represents the zip code and address. 

The current IP addressing protocol is called [Pv4. When IP was first standardized 
in September 1981, the specification required that each system attached to the Inter- 
net be assigned a unique, 32-bit Internet address value. Systems that have interfaces to 
more than one network require a unique IP address for each network interface. The 
first part of an Internet address identifies the network on which the host resides, while 
the second part identifies the particular host on the given network. Keeping with our 
postal system analogy, the network address can be thought of as the zip code, and the 
host address represents the street address. By convention, an IP address is expressed as 
four decimal numbers separated by periods, such as “127.154.95.6.” Valid addresses 
can range from 0.0.0.0 to 255.255.255.255, creating a total of about 4.3 billion ad- 
dresses (4,294,967,296 to be exact). Using this two-level addressing hierarchy, any 
computer connected to the Internet can be located. 

IP addressing can identify a specific network connected to the Internet. To provide 
the flexibility required to support networks of varying sizes, the Internet designers 
decided that the IP address space should be divided into three address classes—Classes 
A, B, and C. Each class fixes the boundary between the network prefix and the host 
number at a different point within the 32-bit address. 

Class A networks are defined by the first number in an IP address. The value can 
range from 000 to 127, creating theoretically 128 unique networks. In reality, how- 
ever, there are only 126 Class A addresses because both 0.0.0.0 and 127.0.0.0 are 
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Voice over IP 


reserved for special use. Each Class A network address can support a total of 
16,777,214 hosts per network, and they represent 50 percent of the total [Pv4 ad- 
dress space. The Class A addresses are normally owned by large Internet service 
providers or well-established major corporations. For example, General Electric 
owns 3.0.0.0, IBM owns 9.0.0.0, Ford Motor Co. owns 19.0.0.0, and the U.S. Postal 
Service owns 56.0.0.0. 

Class B network addresses range from 128.0 to 255.254. Using a Class B address, 
16,384 networks can be identified with up to 65,534 hosts per network. Because 
the Class B address allocation contains slightly more than 1 million addresses, it 
represents 25 percent of the IPv4 address space. Class B addresses are also nor- 
mally owned by very large service providers and global organizations—AOL uses 
205.188.0.0. 

Class C addresses range from 192.0.0 to 233.255.255 and represent 12.5 percent of 
the available IPv4 address space. Slightly less than 2.1 million networks can be identi- 
fied with a Class C address allowing approximately 537 million hosts. ‘The remaining 
12.5 percent of the [Pv4 address space is reserved for special use. 

You would think that 4.3 billion addresses would be sufficient for quite a while, but 
the Internet is running out of space. During the early days of the Internet, the seem- 
ingly unlimited address space allowed IP addresses to be allocated to an organization 
based on a simple request rather than on actual need. As a result, addresses were freely 
assigned to those who asked for them without concerns about the eventual depletion 
of the IP address space. Now many of the Class A and Class B host addresses are not 
even in use. Io make matters worse, new technologies are extending IP addresses 
beyond computers to televisions, toasters, and coffeemakers. 

This is where [Pv6 comes to the rescue. Developed to work with Internet2, IPv6 in- 
creases the IP address size from 32 bits to 128 bits to support more levels of the address 
hierarchy and a much greater number of nodes. IPv6 supports more than 340 trillion tril- 
lion trillion addresses, enough for each person in the world to be allocated 1 billion 
personal IP addresses! ‘That should last for a while. 


One of the newest uses for Internet protocol (IP) is Internet telephony—the practice of 
using an Internet connection to pass voice data using IP instead of using the standard 
public switched telephone network. Often referred to as voice over IP or VolP, this 
approach makes use of a packet-based (or switched) network to carry voice calls, in- 
stead of the traditional circuit-switched network. In simpler terms, VoIP allows a 
person to function as if he or she were directly connected to a regular telephone net- 
work even when at home or in a remote office. It also skips standard long-distance 
charges because the only connection is through an ISP. VoIP is being used more and 
more to keep corporate telephone costs down, as you can just run two network cables 
to a desk instead of separate network and data cables. VoIP runs right over a standard 
network infrastructure, but it also demands a very well-configured network to run 
smoothly. 

For those of us who love to talk (and not to pay for it), there is Skype (www.skype. 
com). Skype was founded in 2002 to develop the first peer-to-peer (P2P) telephony 
network. Today, Skype software allows telephone conversation through a PC and over 
the Internet instead of a separate phone connection. This proprietary freeware uses a 
messenger-like client and offers inbound and outbound PSTN (public switched tele- 
phone network) facilities. 

Skype users can call to any non-computer-based landline or mobile telephone in 
the world and call other Skype users for free. The calls made to or received from tra- 
ditional telephones are charged a fee, as are the voice-mail messages. 

Skype software also provides features like voice mail, instant messaging, call for- 
warding, and conference calling. Skype users are not billed according to the distance 
between the two countries. Instead, the users are charged according to the prosperity 
of the country, the volume of calls made to and from the country, and the access 
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charges. The latest statistical figures show that Skype is one of the fastest-growing 
companies on the Internet: 


e Skype has 54 million members in 225 countries and territories, and the number is 
swelling—just through word-of-mouth marketing by satisfied users! 


e Skype is adding approximately 150,000 users a day, and there are 3 million simul- 
taneous users on the network at any given time. 


e Skype has been downloaded 163 million times in 225 countries and territories. 
e Skype is available in 27 languages. 


e Skype has more users and serves more voice minutes than any other Internet 
voice communications provider. 


Skype continues to grow in the consumer sector and is now offering business-specific 
services designed to reduce business telecommunication costs while offering more 
flexible alternatives to current landline or mobile approaches. Skype also demonstrates 
how VoIP is fast becoming part of the telecommunications infrastructure as shown in 
the following example. 

For those of us to love to talk (and want to pay less than the telephone company 
wants us to pay), there is Vonage (www.vonage.com). The name is a play on their motto: 
Voice-Over-Net-Age—Vonage. Using VoIP technologies, Vonage offers local and long 
distance telephone service to homes and businesses for a single low monthly price. 


The Seaport Hotel in Boston is testing an in-room portal that enables guests to make 
telephone calls and access hotel services and the Internet from a touch screen. 

Geared toward business travelers, the so-called SeaPortal is unique because 
it combines telephone and Web services over a service-oriented architecture. In 
addition, the new technology makes use of the hotel’s existing PBX system, a less- 
expensive approach than replacing the in-house telephone switching system. 

When a call is made in-house, a server routes it through the PBX system. If the 
call is outside the hotel, then the server sends it over Seaport’s high-speed Internet 
provider as a voice over IP (VoIP) call, similar to services provided by Skype or 
Vonage. 

For hotel guests, the system appears on the touch screen as a portal similar to a 
Web site. There’s a welcome section that introduces the service; a destination guide 
for sports and entertainment, dining, news and weather, and other information; and 
a section for guest services that include hotel features and Web browsing. 

‘The system is attached to the in-room phone, which rings when a guest presses 
an icon to make an in-hotel call to housecleaning, the concierge, or another service. 
Picking up the phone automatically makes the connection. To call outside the hotel, 
the guest presses on a phone link that calls up a keypad. 

The portal provides Web mail access and includes a viewer for reading attach- 
ments. In addition, there are USB ports for storing messages or documents on a 
portable flash drive, or a guest can choose to have a document printed in the hotel’s 
business center. All the services are available at no additional charge, including local 
and long-distance calls made in the continental United States. 


Source: Adapted from Antone Gonsalves, “Seaport Hotel In-Room Portal Converges Voice, Web Services,” 
InformationWeek, January 24, 2007. 


The communications speed and capacity of telecommunications networks can be clas- 
sified by bandwidth. The frequency range of a telecommunications channel, it deter- 
mines the channel’s maximum transmission rate. The speed and capacity of data 
transmission rates are typically measured in bits per second (bps). This level is 
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FIGURE 6.26 
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Network Technologies Typical-Maximum bps 
Wi-Fi: wireless fidelity 11-54M 

Standard Ethernet or token ring 10-16M 

High-speed Ethernet 100M-1G 

FDDI: fiber distributed data interface 100M 

DDN: digital data network 2.4K-2M 

PSN: packet switching network—X.25 64K-1.5M 

Frame relay network 1.5M-45M 

ISDN: integrated services digital network 64K/128K-2M 

ATM: asynchronous transfer mode 25/155M-2.4G 
SONET: synchronous optical network 45M-40G 

Kbps = thousand bps or kilobits per second Gbps = billion bps or gigabits per second 
Mbps = million bps or megabits per second 


sometimes referred to as the baud rate, though baud is more correctly a measure of 
signal changes in a transmission line. 

Bandwidth represents the capacity of the connection. The greater the capacity, the 
more likely that greater performance will follow. Thus, greater bandwidth allows 
greater amounts of data to move from one point to another with greater speed. 
Although the relationship among bandwidth, data volume, and speed is theoretically 
sound, in practice, this is not always the case. A common analogy is to think of band- 
width as a pipe with water in it. The larger the pipe, the more water that can flow 
through it. If, however, the big pipe is connected to a small pipe, the effective amount 
of water that can be moved in a given time becomes severely restricted by the small 
pipe. The same problem occurs with network bandwidth. If a large bandwidth con- 
nection tries to move a large amount of data to a network with less bandwidth, the 
speed of the transmission will be determined by the speed of the smaller bandwidth. 

Narrow-band channels typically provide low-speed transmission rates up to 64 Kbps 
but can now handle up to 2 Mbps. They are usually unshielded twisted-pair lines com- 
monly used for telephone voice communications and for data communications by the 
modems of PCs and other devices. Medium-speed channels (medium-band) use 
shielded twisted-pair lines for transmission speeds up to 100 Mbps. 

Broadband channels provide high-speed transmission rates at intervals from 
256 Kbps to several billion bps. ‘Typically, they use microwave, fiber optics, or satellite 
transmission. Examples are 1.54 Mbps for T1 and 45 Mbps for T3 communications 
channels, up to 100 Mbps for communications satellite channels, and between 52 Mbps 
and 10 Gbps for fiber-optic lines. See Figure 6.26. 


Regular telephone service relies on circuit switching, in which a switch opens a circuit 
to establish a link between a sender and a receiver; it remains open until the commu- 
nication session is completed. In message switching, a message is transmitted a block 
at a time from one switching device to another. 

Packet switching involves subdividing communications messages into fixed or 
variable-length groups called packets. For example, in the X.25 protocol, packets are 
128 characters long, while in the frame relay technology, they are of variable length. 
Packet switching networks are frequently operated by value-added carriers who use 
computers and other communications processors to control the packet switching 
process and transmit the packets of various users over their networks. 

Early packet switching networks were X.25 networks. The X.25 protocol is an in- 
ternational set of standards governing the operations of widely used, but relatively 
slow, packet switching networks. Frame relay is another popular packet switching pro- 
tocol and is used by many large companies for their wide area networks. Frame relay 
is considerably faster than X.25 and is better able to handle the heavy telecommunica- 
tions traffic of interconnected local area networks within a company’s wide area client/ 
server network. ATM (asynchronous transfer mode) is an emerging high-capacity cell 
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switching technology. An ATM switch breaks voice, video, and other data into fixed 
cells of 53 bytes (48 bytes of data and 5 bytes of control information) and routes them 
to their next destination in the network. ATM networks are being developed by many 
companies needing their fast, high-capacity multimedia capabilities for voice, video, 
and data communications. See Figure 6.27. 


Network Section 256 of the Communications Act, enacted in February 1996, states two key 

oy: purposes: (1) “to promote nondiscriminatory accessibility by the broadest number of 
Intero pera bil ity users and vendors of communications products and services to public telecommunica- 
tions networks used to provide telecommunications service” and (2) “to ensure the 
ability of users and information providers to seamlessly and transparently transmit and 
receive information between and across telecommunications networks.” To accom- 
plish these purposes, the Federal Communications Commission (FCC) is required to 
establish procedures to oversee coordinated network planning by providers of tele- 
communications services. It is also authorized to participate in the development, by 
appropriate industry standards-setting organizations of public telecommunications, of 
network interconnectivity standards that promote access. 

As you can see, the FCC is a key regulatory agency with regard to telecommunica- 
tions. Although we tend to think of the FCC as the oversight body for radio and tele- 
vision, it is equally involved in all aspects of data and voice communications. If you 
reread the first paragraph of this section, it becomes clear that there is an important 
underlying reason for the FCC to be so involved with telecommunications. The an- 
swer lies in the importance of a concept called network interoperability. 

This interoperability ensures that anyone anywhere on one network can commu- 
nicate with anyone anywhere on another network without having to worry about 
speaking a common language from a telecommunications perspective. All that we have 
discussed in this chapter with regard to business value would not be possible without 
complete accessibility, transparency, and seamless interoperability across all networks. 
Without these things, the Internet would not be possible, nor would e-mail, instant 
messaging, or even common file sharing. 

Fortunately for us, everyone in the telecommunications field understands the im- 
portance of network interoperability, and as such, they work together to ensure that all 
networks remain interoperable. 


e Telecommunications Trends. Organizations are be- support business operations and collaboration within 
coming networked enterprises that use the Internet, in- the enterprise and with their customers, suppliers, 
tranets, and other telecommunications networks to and other business partners. Telecommunications has 
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entered a deregulated and fiercely competitive environ- 
ment with many vendors, carriers, and services. 
‘Telecommunications technology is moving toward 
open, internetworked digital networks for voice, data, 
video, and multimedia. A major trend is the pervasive 
use of the Internet and its technologies to build inter- 
connected enterprise and global networks, like intranets 
and extranets, to support enterprise collaboration, 
e-commerce, and other e-business applications. 


The Internet Revolution. The explosive growth of the 
Internet and the use of its enabling technologies have 
revolutionized computing and telecommunications. The 
Internet has become the key platform for a rapidly ex- 
panding list of information and entertainment services 
and business applications, including enterprise collabo- 
ration, electronic commerce, and other e-business 
systems. Open systems with unrestricted connectivity 
using Internet technologies are the primary telecommu- 
nications technology drivers in e-business systems. 
Their primary goal is to promote easy and secure access 
by business professionals and consumers to the resources 
of the Internet, enterprise intranets, and interorganiza- 
tional extranets. 


The Business Value of the Internet. Companies are 
deriving strategic business value from the Internet, 
which enables them to disseminate information globally, 
communicate and trade interactively with customized 
information and services for individual customers, and 
foster collaboration of people and integration of busi- 
ness processes within the enterprise and with business 
partners. These capabilities allow them to generate cost 
savings from using Internet technologies, revenue in- 
creases from electronic commerce, and better customer 
service and relationships through better supply chain 
management and customer relationship management. 


The Role of Intranets. Businesses are installing and 
extending intranets throughout their organizations to 
(1) improve communications and collaboration among 
individuals and teams within the enterprise; (2) publish 
and share valuable business information easily, inexpen- 
sively, and effectively via enterprise information portals 
and intranet Web sites and other intranet services; and 


(3) develop and deploy critical applications to support 
business operations and decision making. 


The Role of Extranets. The primary role of extranets 
is to link the intranet resources of a company to the in- 
tranets of its customers, suppliers, and other business 
partners. Extranets can also provide access to opera- 
tional company databases and legacy systems to business 
partners. Thus, extranets provide significant business 
value by facilitating and strengthening the business rela- 
tionships of a company with customers and suppliers, 
improving collaboration with its business partners, and 
enabling the development of new kinds of Web-based 
services for its customers, suppliers, and others. 


Telecommunications Networks. The major generic 
components of any telecommunications network are 
(1) terminals, (2) telecommunications processors, 

(3) communications channels, (4) computers, and 

(5) telecommunications software. There are several 
basic types of telecommunications networks, including 
wide area networks (WANs) and local area networks 
(LANs). Most WANs and LANs are interconnected 
using client/server, network computing, peer-to-peer, 
and Internet networking technologies. 


Network Alternatives. Key telecommunications net- 
work alternatives and components are summarized in 
Figure 6.11 for telecommunications media, processors, 
software, channels, and network architectures. A basic 
understanding of these major alternatives will help busi- 
ness end users participate effectively in decisions involv- 
ing telecommunications issues. Telecommunications 
processors include modems, multiplexers, internetwork 
processors, and various devices to help interconnect and 
enhance the capacity and efficiency of telecommunica- 
tions channels. Telecommunications networks use such 
media as twisted-pair wire, coaxial cables, fiber-optic 
cables, terrestrial microwave, communications satellites, 
cellular and PCS systems, wireless LANs, and other 
wireless technologies. 


‘Telecommunications software, such as network operat- 
ing systems and telecommunications monitors, controls 
and manages the communications activity in a telecom- 
munications network. 


Key Terms and Concepts d 


These are the key terms and concepts of this chapter. The page number of their first explanation is in parentheses. 


nn wn BW N ae 


. Client/server networks (231) 


. Coaxial cable (236) 11. Internet networking 
technologies (212) 


. Digital (234) 


(ISP) (215) 


. Communications 


satellites (237) 


. Analog (234) 8. Extranets (222) 14. Legacy systems (232) 
. Bandwidth (249) 9. Fiber optics (236) 15. Local area networks 
. Bluetooth (239) 10. Internet service provider (LAN) (229) 


16. Metcalfe’s law (208) 
17. Middleware (212) 
18. Modems (241) 


12. Internetwork processors (242) 19. Multiplexer (242) 
13. Intranets (219) 


20. Network (208) 
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21. Network architectures (245) 26. Peer-to-peer networks (233) 32. Telecommunications software (243) 


a. Open Systems Interconnection 27. Protocol (245) 
(OSI) (245) 
b. TCP/IP (247) 


22. Network computing (232) 
23. Network interoperability (251) 
24. Network topologies (244) 


processors (241) 
25. Open systems (212) 


28. Telecommunications (211) 
29. Telecommunications media (235) 
30. Telecommunications network (225) 


31. Telecommunications 


33. Virtual private network 
(VPN) (229) 
34. VoIP (248) 
35. Wide area networks (WAN) (228) 
36. Wireless LAN (239) 
37. Wireless technologies (213) 


Review Quiz 


Match one of the key terms and concepts listed previously with one of the brief examples or definitions that follow. Try to find 
the best fit for answers that seem to fit more than one term or concept. Defend your choices. 


—— 1. Technique for making telephone calls over the 
Internet. 


—— 2. The ability for all networks to connect to one 
another. 


—— 3. An interconnected or interrelated chain, group, or 
system. 


—— 4. Software that serves to “glue together” separate 
programs. 


5. The usefulness, or utility, of a network equals the 
square of the number of users. 


__— 6. Internet-like networks that improve communica- 
tions and collaboration, publish and share infor- 
mation, and develop applications to support 
business operations and decision making within 
an organization. 


—— 7. Provide Internet-like access to a company’s 
operational databases and legacy systems by its 
customers and suppliers. 


—— 8. Company that provides individuals and organiza- 
tions access to the Internet. 


—— 9. A communications network covering a large 
geographic area. 

__— 10. A communications network in an office, a building, 
or other worksite. 


—— 11. Representation of an electrical signal using binary 
numbers. 


—— 12. Coaxial cable, microwave, and fiber optics are 
examples. 


13. Acommunications medium that uses pulses of 
laser light in glass fibers. 


___ 14. A short range cable replacement technology for 
digital devices. 


— 15. Includes modems, multiplexers, and internetwork 
processors. 


—— 16. Includes programs such as network operating 
systems and Web browsers. 


____ 17. A common communications processor for 
microcomputers. 


— 18 


—__ 19. 


—___ 20 


=— 21. 


= — 22, 


—— 23; 


— = 24, 


— 25. 


20; 


= 2 


C 28. 


=— 29, 


— 30. 


—— 345 


2 432. 


. Helps a communications channel carry simultane- 


ous data transmissions from many terminals. 


Star, ring, and bus networks are examples. 


. Representation of an electrical signal that is analo- 


gous to the signal itself. 


The communications speed and capacity of 
telecommunications networks. 


Intranets and extranets can use their network fire- 
walls and other security features to establish secure 
Internet links within an enterprise or its trading 
partners. 


Sturdy cable that provides high bandwidth on a 
single conductor. 


Standard rules or procedures for control of 
communications in a network. 


An international standard, multilevel set of proto- 
cols to promote compatibility among telecommu- 
nications networks. 


The standard suite of protocols used by the Inter- 
net, intranets, extranets, and some other networks. 


Information systems with common hardware, 
software, and network standards that provide easy 
access for end users and their networked computer 
systems. 


Interconnected networks need communications 
processors such as switches, routers, hubs, and 
gateways. 


Web sites, Web browsers, HTML documents, 
hypermedia databases, and TCP/IP networks are 
examples. 


Networks in which end-user PCs are tied to net- 
work servers to share resources and application 
processing. 


Network computers provide a browser-based 
interface for software and databases provided by 
servers. 


End-user computers connect directly with each 
other to exchange files. 
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___ 33. Orbiting devices that provide multiple communi- 
cation channels over a large geographical area. 


—— 34. Older, traditional mainframe-based business infor- 
mation systems. 


—— 35. Any arrangement in which a sender transmits a 
message to a receiver over a channel consisting of 
some type of medium. 


—— 36. Provides wireless network access for laptop PCs in 
business settings. 


___ 37. Their goal is to improve the telecommunications 


environment by fostering standardized protocols, 
communications hardware and software, and the 
design of standard interfaces, among other things. 


____ 38. A type of communications network consisting of 


terminals, processors, channels, computers, and 
control software. 


___ 39. Telecommunications technologies that do not rely 


on physical media such as cables or fiber optics. 


Discussion Questions 


1. The Internet is the driving force behind developments 
in telecommunications, networks, and other informa- 
tion technologies. Do you agree or disagree? Why? 


2. How is the trend toward open systems, connectivity, 
and interoperability related to business use of the 
Internet, intranets, and extranets? 


3. Refer to the Real World Case on on telemedicine and 
videoconferencing in the chapter. Not mentioned in the 
case are the implications for both privacy and data secu- 
rity arising from the use of these technologies. Which 
specific ones could arise as a result, and to what extent 
do you believe those would inhibit the deployment of 
these advances? 


4. How will wireless information appliances and services 
affect the business use of the Internet and the Web? 
Explain. 


5. What are some of the business benefits and manage- 
ment challenges of client/server networks? Network 
computing? Peer-to-peer networks? 


6. What is the business value driving so many companies 
to install and extend intranets rapidly throughout their 
organizations? 


10. 


. What strategic competitive benefits do you see in a 


company’s use of extranets? 


. Refer to the Real World Case on Starbucks and others 


on the future of free, public Wi-Fi. New start-ups are 
offering free access in exchange for serving advertising 
while browsing the Web. What do you think about this 
business model? Would you expect to see any competi- 
tion between these companies, say, two different pro- 
viders covering the same airport, or rather some degree 
of exclusivity? 


. Do you think that business use of the Internet, in- 


tranets, and extranets has changed what businesspeople 
expect from information technology in their jobs? 
Explain. 


The insatiable demand for everything wireless, video, 
and Web-enabled everywhere will be the driving force 
behind developments in telecommunications, network- 
ing, and computing technologies for the foreseeable 
future. Do you agree or disagree? Why? 


Analysis Exercises 


1. How many addresses are enough? 
The Internet Protocol version 4 assigns each connected 
computer a 4-byte address known as an IP address. 
Each message, or packet, includes this address so that 
routers know where to forward it. This is the Internet’s 
version of mailing addresses. 

Each region of the world has been given a range of 
IP addresses to administer locally, with America taking 
the largest share. Asia, with a significantly larger popu- 
lation, received a disproportionately small range of 
numbers and is afraid of running out. 

Anticipating this problem, the Internet Engineering 
‘Task Force adopted IPv6, which uses addresses 16 bytes 
long. Although slow to be adopted, all Internet root 
servers now support IPv6, and Internet service provid- 
ers are rolling it out as needed while maintaining back- 
ward compatibility for IPv4. The U.S. federal 


government had mandated the change to IPv6 for all 
federal agencies by 2008. 


a. Express as a power of 2 the number of nodes that 
can exist using [Pv4. 

b. Express as a power of 2 the number of nodes that 
can exist using IPv6. 


. MNO Incorporated Communications Network 


Calculating Bandwidth 

MNO Incorporated is considering acquiring its own 
leased lines to handle voice and data communications 
among its 14 distribution sites in three regions around 
the country. The peak load of communications for each 
site is expected to be a function of the number of phone 
links and the number of computers at that site. Com- 
munications data are available below. You have been 
asked to analyze this information. 


a. Create a database table with an appropriate structure 
to store the data below. Enter the records shown be- 
low and get a printed listing of your table. 

b. Survey results suggest that the peak traffic to and 
from a site will be approximately 2 kilobits per sec- 
ond for each phone line plus 10 kilobits per second 
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visible light through. As a result, we can watch our pop- 
corn pop without feeling any heat. Keep in mind that 
visible light consists of radiation frequencies closer to 
the danger end of the spectrum than microwave light. 

Lower radiation frequencies can cause damage only 
if the intensity is strong enough, and that damage is 


limited to common burns. Microwave ovens cook food 
by drawing 800 or more watts and converting them into 
a very intense (bright) microwave light. Cellular tele- 
phones, by comparison, draw a very tiny amount of 
current from the phone’s battery and use the resulting 
microwaves to transmit a signal. In fact, the heat you 
feel from the cell phone is not from the microwaves but 


for each computer. Create a report showing the esti- 
mated peak demand for the telecommunications sys- 
tem at each site in kilobits. Create a second report 
grouped by region and showing regional subtotals 
and a total for the system as a whole. 


Site Location Region Phone Lines Computers 


Boston East 228 95 rather from its discharging battery. It is extremely un- 
New York East 468 205 likely that either device can give the user cancer, though 
Richmond East 189 84 a microwave oven could cause serious burns if the oper- 
Atlanta East 192 88 ator disables its safety features. 
eR ab te y a. Use an Internet search engine and report back what 
New-Orleans Centrál 217 58 the World Health Organization (WHO) has had to say 
Chicago Central 383 160 about microwave radiation or nonionizing radiation. 
Saint Louis Central 212 91 b. Use an Internet search engine to identify the various 
Houston Central 238 88 complaints posed by stakeholders regarding cell phone 
Denver West 202 77 towers. Write a one-page paper describing an alterna- 
Los Angeles West 364 132 tive to cell phone towers that would enable cell phone 
> a ancisco Ml : F 7 a use and yet mitigate all or most of these complaints. 
eattle est 


, EE, 4. Maximizing Communications 
3. Wireless Radiation 


Frying Your Brains? 

Radio waves, microwaves, and infrared all belong to the 
electromagnetic radiation spectrum. ‘These terms refer- 
ence ranges of radiation frequencies we use every day in 
our wireless networking environments. However, the very 
word radiation strikes fear in many people. Cell towers 
have sprouted from fields all along highways. ‘Tall roof- 
tops harbor many more cell stations in cities. Millions of 
cell phone users place microwave transmitters/receivers 
next to their heads each time they make a call. Computer 
network wireless access points have become ubiquitous. 
Even McDonald’s customers can use their machines to 
browse the Internet as they eat burgers. With all this 
radiation zapping about, should we be concerned? 

The electromagnetic spectrum ranges from ul- 
tralow frequencies to radio waves, microwaves, infrared, 
visible light, ultraviolet, x-ray, and up to gamma-ray ra- 
diation. Is radiation dangerous? The threat appears to 
come from two different directions, the frequency and 
the intensity. A preponderance of research has demon- 
strated the dangers of radiation at frequencies just 
higher than those of visible light, even including the ul- 
traviolet light used in tanning beds, x-rays, and gamma- 
rays. These frequencies are high (the wavelengths are 
small enough) to penetrate and disrupt molecules and 
even atoms. The results range from burns to damaged 
DNA that might lead to cancer or birth defects. 

However, radiation’s lower frequencies ranging from 
visible light (the rainbow colors you can see), infrared, 
microwave, and radio waves have long waves unable to 
penetrate molecules. Indeed, microwave wavelengths are 
so long that microwave ovens employ a simple viewing 
screen that can block these long waves and yet allow 


Human Networking 

Ms. Sapper, this year’s annual partner meeting coordi- 
nator for a global accounting firm, faced an interesting 
challenge. With 400 high-powered partners gathering 
from all around the world, she wanted to arrange meal 
seating in a way that maximized diversity at each table. 
She hoped that this seating would encourage partners 
to open up new lines of communication and discourage 
old cliques from re-forming. The banquet facility in- 
cluded 50 tables, each seating eight guests. Sapper had 
all the necessary partner data, but she found herself 
stumped about how to maximize diversity at each table. 
Let’s walk her through the process. 

Download and save “partners.xls” from the MIS 9e 
OLC. Open the file and note that in addition to part- 
ners’ names, it also contains industry, region, and gender 
information. The Table No. column has been left blank. 


a. In Excel’s menu, select “Data” and then “Sort” and 
then press the “F1” key for help. Read through each 
of the topics. How would an ascending sort arrange 
the list “Smith; Jones; Zimmerman”? 

b. What feature allows users to sort month lists so 
January appears before April? 

c. Sort the partner data first on Gender, then by Indus- 
try, and then by Region, and save the file. 

d. Examine the sorted results from the previous step. 
Notice that assigning the first eight partners to the 
same table would minimize diversity. This result 
should also provide a clue about how to maximize 
diversity. Using this insight, assign a table number 
in the range from 1 to 50 to each partner in your 
sorted list so to maximize diversity. Save the file as 
“partners_sorted.xls” and explain your logic. 


Metric & Multistandard Components 


REAL WORLD 


Corp.: The Business Value of a 


Secure Self-Managed Network 
for a Small-to-Medium Business 


ith 22,000 customers, 48,800 cataloged parts, 

and 150 employees working in five U.S. loca- 

tions and an office in Germany, the last thing 
John Bellnier needs is an unreliable network. 

Yet that’s exactly what he contended with for years as IT 
manager at Metric & Multistandard Components Corp. 
(MMCC). MMCC may still be classified as a small business 
by some standards, but this small-to-medium business (SMB) 
definitely has been a big-time success story in its industry. 

MMCC was founded in 1963 by three Czech immigrants 
in Yonkers, New York, and has grown into one of the largest 
U.S. distributors of metric industrial fasteners. In the last 
10 years business has doubled, reaching $20 million in sales 
in 2005, and growing just as fast in 2006. However, the com- 
pany’s growth overwhelmed its telecommunications network, 
which was managed by an outside telecom network manage- 
ment company. The network crashed frequently, interrupting 
e-mail communications and leaving customer service repre- 
sentatives unable to fulfill orders promptly. 

“We had locked ourselves into a three-year contract with 
our provider,” Bellnier says. “It was a managed system and 
therefore we didn’t have passwords to the routers. I experi- 
enced dozens of episodes of spending days on the phone try- 
ing to escalate job tickets to get the problems solved. It was a 
nightmare.” 

He recalls a particular challenge that occurred when the 
provider denied that its router had gone down: “Their net- 
work was broken, and we had to deal with the downtime con- 
sequences on top of spending time trying to convince someone 
2,000 miles away that one of their routers needed repair.” 

Several months before MMCC’s contract with the pro- 
vider was to expire, Bellnier began to seek a better network 
solution. He outlined five key requirements for a new net- 
work for the company: 


e Reliability. Provide maximum network uptime to 
sustain business operations. 


e Scalability. Grow with MMCC’ increasing business 
demands. 


e Security. Ensure confidentiality and integrity of 
company data. 


e Economy. Reduce costs for both initial outlay and 
ongoing administrative and maintenance overhead. 


e Responsibility. “I wanted all the hardware from one 
vendor so when issues come up, I know who to turn 
to,” Bellnier adds. 


Bellnier met with MMCC executives in 2004 and told 
them that he believed he could manage a new companywide 
network internally, on a limited budget, and could recoup 
the upfront investment by lowering operating expenses. 
Company executives agreed that the current network 
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situation was intolerable and gave Bellnier the go-ahead to 
research and select an experienced local IT consulting firm 
that was certified to build telecom networks by one of the 
top telecom hardware and software vendors. 

Bellnier selected Hi-Link Computer Corp., a Cisco Sys- 
tems Premier Certified Partner that had earned Cisco spe- 
cializations in wireless local area networks (LANs) and 
virtual private network (VPN) security. As a first step, Hi- 
Link audited MMCC’s existing network and interviewed 
management about business goals and requirements. Com- 
pany management was impressed with Hi-Link and agreed 
that Bellnier should seek a formal project proposal from the 
consultants. 

Hi-Link’s consulting engineers, led by Business Devel- 
opment Manager Jim Gartner, proposed to Bellnier that 
MMCC build a secure network foundation consisting of vir- 
tual private network links between sites. Using Cisco inte- 
grated services routers and security appliances, the network 
blueprint was designed to give Bellnier transparent remote 
access to all necessary devices, increase his control over the 
network, and improve network performance. Hi-Link 
showed Bellnier how a secure network foundation works to 
automate routine maintenance, monitor the network, and 
alert IT staff of security or performance issues. Bellnier ac- 
cepted Hi-Link’s network plan and made a formal presenta- 
tion outlining the proposal to company management. 

After discussing the business costs, risks, and benefits of 
Hi-Link’s plan, MMCC executives agreed to the proposal 
and the following key project objectives: 


Goal. Create a business network for MMCC with higher 
reliability, security, and scalability, but lower costs, than the 
existing externally managed network. 


Strategy. Design an IP (Internet Protocol) network with 
advanced technologies for high availability and efficient net- 
work and security management, which can be operated by a 
very small IT department. 


Technology. Use virtual private network technologies 
to connect remote offices and users securely and facilitate 
company expansion. 


Support. After designing and quickly implementing a se- 
cure network foundation based on Cisco products, Hi-Link 
will help MMCC with technical support whenever needed. 


Once the consulting contract was signed. Hi-Link began 
working with Cisco and the local telecom company to install 
the telecommunications lines needed for the new network. 
When those were in place, it took less than a week to deploy 
the Cisco routers, switches, and other telecommunications 
hardware preconfigured by Hi-Link. “Hi-Link made this 
implementation effortless by working efficiently at the best 
times for us,” Bellnier says. “They handled all the details 


associated with the local telecom company, Internet provid- 
ers, and project management.” 

After the secure, internally managed network was up and 
running, the following benefits soon became apparent: 


e The new network eliminated MMCC’s network 
congestion almost immediately. 


e Network bandwidth, reliability, and security were 
significantly improved. 


e The sophisticated network monitoring system greatly 
improved network management. 


e Network downtime was reduced to nearly zero. 


e The new network is saving MMCC a significant 
amount of money. 


“The previous network had cost us just under $11,000 a 
month; the new high-bandwidth telecommunications lines 
we lease cost $4,400 per month,” Bellnier explains. “We’ve 
calculated an annual savings of $77,000, which means we got 
our return on investment in our first six months.” 

Best of all, the network is transparent and easy to manage. 
“We can access all our Cisco routers. We can view the errors 
and logs. All our telecommunications lines are contracted di- 
rectly with the local exchange carrier, which gives us a direct 
communications link to resolve troubles,” Bellnier says. 

Hi-Link’s Gartner says of MMCC’s network: “Every re- 
mote office is configured in exactly the same way, and we can 


CASE STUDY QUESTIONS 


1. What were the most important factors contributing to 
MMCC% success with its new, secure, self-managed 
network? Explain the reasons for your choices. 


2. What are some of the business benefits and challenges 
of self-managed and externally managed networks? 


3. Which type of network management would you advise 
small-to-medium business firms to use? Explain the 
reasons for your recommendation. 
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easily duplicate it to bring up any new location. We can eas- 
ily add extra bandwidth to meet additional demands.” Thus, 
Hi-Link is helping MMCC add wireless capability to all its 
warehouses, knowing that additional capacity can be 
provided if needed. 

Gartner emphasizes that as it did for MMCC, a secure 
network foundation can improve a small company’s opera- 
tional efficiency, secure sensitive data, contain costs, and en- 
hance employee connectivity and customer responsiveness. 
For example, companies with such network capabilities allow 
customers to track their orders securely in real time over the 
Web, empower customer service agents with detailed 
account information even before they answer the customer’s 
phone call, and provide easy, inexpensive videoconferencing 
for remote workers, vendors, and customers. 

Bellnier offers advice to other IT managers in small 
companies that may be considering building and managing 
their own network: “Do not limit company expansion by 
thinking you cannot support or afford a self-managed system 
with limited resources,” he says. 

He adds that MMCC’s experience with Hi-Link shows 
just how quickly an SMB can “recoup the cost and imple- 
ment a self-managed system with far superior performance 
and a lot fewer problems.” 


Source: Adapted from Eric J. Adams, “Creating a Foundation for Growth,” 
iQ Magazine, Second Quarter 2006. 


REAL WORLD ACTIVITIES 


1. Use the Internet to discover more about the telecom- 
munications products and services, and the current 
business performance and prospects, of Cisco Systems 
and Hi-Link and some of their many competitors in the 
telecom industry. Which telecom hardware and soft- 
ware company and IT consulting firm would you rec- 
ommend to a small-to-medium business with which you 
are familiar? Explain your reasons to the class. 


a 


In telecommunications network installation and man- 
agement, as in many other business situations, the 
choice between “do it yourself” and “let the experts 
handle it” is a crucial business decision for many com- 
panies. Break into small groups with your classmates to 
debate this choice for small-to-medium businesses. See 
if you can agree on several key criteria that should be 
considered in making this decision, and report your 
conclusions to the class. 


MODULE Ill Cx wy 


ow do Internet technologies and other forms of IT support business 

processes, e-commerce, and business decision making? The four 

chapters of this module show you how such business applications of 
information systems are accomplished in today’s networked enterprises. 


e Chapter 7: e-Business Systems describes how information systems integrate 
and support enterprisewide business processes, especially customer relationship 
management, enterprise resource planning, and supply chain management, as 
well as the business functions of marketing, manufacturing, human resource man- 
agement, accounting, and finance, and discusses the benefits and challenges of 
these major enterprise applications. 


e Chapter 8: e-Commerce Systems introduces the basic process components of 
e-commerce systems, and discusses important trends, applications, and issues in 
e-commerce. 


e Chapter 9: Decision Support Systems shows how management information 
systems, decision support systems, executive information systems, expert systems, 
and artificial intelligence technologies can be applied to decision-making situa- 
tions faced by business managers and professionals in today’s dynamic business 
environment. 
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e-BUSINESS SYSTEMS 


Section I 

Enterprise Business Systems 
Introduction 

Cross-Functional Enterprise Applications 


Real World Case 1: NetSuite Inc., Berlin Packaging, 
Churchill Downs, and Others: The Secret to CRM 
Is in the Data 


Getting All the Geese Lined Up: Managing at the 
Enterprise Level 


Customer Relationship Management: The Business Focus 
What Is CRM? 

The Three Phases of CRM 

Benefits and Challenges of CRM 

Enterprise Resource Planning: The Business Backbone 
What Is ERP? 

Benefits and Challenges of ERP 

Supply Chain Management: The Business Network 
What Is SCM? 

The Role of SCM 

Benefits and Challenges of SCM 

Enterprise Application Integration 

‘Transaction Processing Systems 

Enterprise Collaboration Systems 

Section II 

Functional Business Systems 

IT in Business 

Marketing Systems 


Real World Case 2: OHSU, Sony, Novartis, and Others: 
Strategic Information Systems—It’s HR’s Turn 


Manufacturing Systems 
Human Resource Systems 
Accounting Systems 

Financial Management Systems 


Real World Case 3: Perdue Farms and Others: Supply 
Chain Management Meets the Holiday Season 


Information 
Technologies 


1. Identify the following cross-functional enterprise 
systems, and give examples of how they can pro- 
vide significant business value to a company: 


a. Enterprise resource planning. 

b. Customer relationship management. 
c. Supply chain management. 

d. Enterprise application integration. 
e. Transaction processing systems. 


f. Enterprise collaboration systems. 


2. Give examples of how the Internet and other 


information technologies support business 
processes within the business functions of 
accounting, finance, human resource manage- 
ment, marketing, and production and operations 
management. 


3. Understand the need for enterprise application 


integration to improve the support of business in- 
teractions across multiple e-business applications. 
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SECTION I 


Introduction 


Cross- 
Functional 
Enterprise 
Applications 


Enterprise 
Application 
Architecture 


Enterprise Business Systems 


Contrary to popular opinion, e-business is not synonymous with e-commerce. E-business is 
much broader in scope, going beyond transactions to signify use of the Net, in combination 
with other technologies and forms of electronic communication, to enable any type of busi- 
ness activity. 


This chapter introduces the fast-changing world of business applications of infor- 
mation technology, which increasingly consists of what are popularly called e-business 
applications. Remember that e-business, a term originally coined by Lou Gerstner, 
CEO of IBM, is the use of the Internet and other networks and information technolo- 
gies to support e-commerce, enterprise communications and collaboration, and Web- 
enabled business processes, both within a networked enterprise and with its customers 
and business partners. E-business includes e-commerce, which involves the buying, sell- 
ing, marketing, and servicing of products, services, and information over the Internet 
and other networks. We will cover e-commerce in greater depth in Chapter 8. 

In this chapter, we explore some of the major concepts and applications of e-business. 
We begin by focusing in Section I on examples of cross-functional enterprise systems, 
especially customer relationship management, enterprise resource planning, and supply 
chain management. In Section I, we explore examples of information systems that 
support essential processes in the functional areas of business. See Figure 7.1. 

Read the Real World Case on the next page. We can learn a lot from this case 
about the challenges and benefits of customer relationship management systems. 


Many companies today are using information technology to develop integrated cross- 
functional enterprise systems that cross the boundaries of traditional business func- 
tions to reengineer and improve vital business processes all across the enterprise. 
These organizations view cross-functional enterprise systems as a strategic way to use 
IT to share information resources and improve the efficiency and effectiveness of 
business processes, as well as to develop strategic relationships with customers, suppli- 
ers, and business partners. Figure 7.2 illustrates a cross-functional business process. 

Many companies first moved from functional, mainframe-based J/egacy systems to 
integrated, cross-functional client/server applications. This move typically involved in- 
stalling enterprise resource planning, supply chain management, or customer relationship 
management software from SAP America, Oracle, or others. Instead of focusing on the 
information processing requirements of business functions, such enterprise software 
focuses on supporting integrated clusters of business processes involved in the opera- 
tions of a business. 

Now, as we see continually in the Real World Cases in this text, business firms are 
using Internet technologies to help them reengineer and integrate the flow of infor- 
mation among their internal business processes and their customers and suppliers. 
Companies all across the globe are using the World Wide Web and their intranets and 
extranets as technology platforms for their cross-functional and interenterprise infor- 
mation systems. 


Figure 7.3 presents an enterprise application architecture, which illustrates the inter- 
relationships of the major cross-functional enterprise applications that many compa- 
nies have or are installing today. This architecture is not intended as a detailed or 
exhaustive application blueprint but rather as a conceptual framework to help you 
visualize the basic components, processes, and interfaces of these major e-business 
applications, along with their interrelationships. This application architecture also 
spotlights the roles these business systems play in supporting the customers, suppliers, 
partners, and employees of a business. 


REAL WORLD 


ach Nelson sits in a Silicon Valley coffeehouse, 

sipping a latte, nibbling a pastry, and drawing IT 

architecture diagrams. His mission: to illustrate 
what he believes is the biggest reason that the software cate- 
gory known as customer relationship management (CRM) 
has been unable to shake the black marks of too many failed 
multimillion-dollar deployments. 

CRM is easier to implement when a company is young, 
he says. “The elephant in the room with CRM systems is that 
there’s no customer data native in them,” says Nelson, CEO 
of NetSuite Inc., which sells a suite of Web-based, on-demand 
business applications, including CRM. “That’s why they fail.” 

When CRM came onto the market in the mid-1990s, 
driven largely by Siebel Systems, the software typically came 
bundled with proprietary databases, which then had to be 
populated with customer data housed in disparate enterprise 
systems. The result? “Customer records are scattered and 
there’s often overlap and inconsistency,” Nelson contends. 

By the time he’s finished with his morning snack, Nelson 
has also made a convincing case as to why small and midsize 
companies are primed to get CRM right. CRM is a lot easier 
to do early in a company’s history than it is later. Also, Web- 
based subscription software, such as the kind that Nelson’s 
company offers, has given them access to IT applications 
that in the past might have been too costly or too complex. 
Designs for Health Inc., a $10 million-a-year maker of 
prescription nutritional supplements, isn’t ready to invest 
millions in a big CRM package, but it did need a more 
sophisticated accounting system than Intuit Corp.’s Quick- 
Books. So it turned to NetSuite to host a general-ledger 


FIGURE 7.1 


CRM software enables sales and marketing 
professionals to increase sales revenue by providing 
more and better services to customers and prospects. 


Source: © Simon Dearden/Corbis. 
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NetSuite Inc., Berlin Packaging, 
Churchill Downs, and Others: The 
Secret to CRM Is in the Data 


application that would let the company automate its account- 
ing processes and easily share the data with other NetSuite 
applications, such as the CRM module it would add later. 

Perhaps the most crucial factor to the CRM success of 
small and midsize businesses is that most aren’t yet paralyzed 
by data silos and disparate systems, and they’ve learned from 
those that have had to spend lots of time and energy bridg- 
ing the silos. “The biggest problem I have with having dis- 
parate systems is determining what is your source of the 
truth,” says Steve Canter, CIO at Berlin Packaging LLC, a 
$200 million-a-year maker of cans and bottles used to pack- 
age everything from makeup to jelly. “I have a customer- 
relationship-management system that has a customer master 
file. I have an order-management system that has a customer 
master. If the information between those systems doesn’t 
agree, which one is true? Having a single instance of the 
customer master, we know what the truth is.” 

In theory, customer data integration provides a universal 
view of a customer by resolving discrepancies in names and 
addresses, as well as summarizing customer interaction data 
from multiple systems. Customer data in many IT compa- 
nies remain balkanized as CRM, enterprise resource plan- 
ning, and supply chain management systems have proliferated. 
That means the IT behind customer-facing operations such 
as call centers often can’t provide employees with a single 
view of a customer. 

Berlin considered adding a PeopleSoft CRM application 
to the company’s existing PeopleSoft enterprise resource plan- 
ning and supply chain management system, but it decided 
such an effort might prove too distracting. So Berlin opted to 
use the People Tools programming code in the ERP system to 
build bolt-on applications that convert financial and supply 
chain management functions into CRM processes. Including 
housing records on more than 27,000 customers acquired 
since the mid-1990s, the ERP database now serves as a clear- 
inghouse of customer data that lets any part of the company 
access definitive and wide-ranging information. The knowl- 
edge that there are no other collections of customer data else- 
where in the company provides significant peace of mind. 

Whats more, Canter not only has accomplished this 
without absorbing any hard costs, but employees have quickly 
adopted every tool he’s introduced, something any big- 
company CIO will tell you is the most elusive part of a CRM 
deployment. The key, Canter says, has been a combination of 
incremental changes and interfaces salespeople already are 
familiar with. “It’s not like implementing a CRM system where 
overnight their lives are changed,” he says. “Little by little, 
they’re getting a CRM system without even realizing it.” 

Creating de facto CRM systems out of other applications 
isn’t for everyone, says Barton Goldenberg, president of CRM 
consulting firm ISM. Goldenberg is a firm believer that CRM 
software can provide data intelligence and support for front- 
end business processes that even the most carefully tweaked 
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ERP system can’t match. “Data in its own right is useless un- 
less it’s put into context,” he says. “I can serve data up via pi- 
geons, but it’s the CRM application that adds the value.” 

A CRM deployment that’s carefully thought out has done 
just that for Churchill Downs Inc., the $500 million-a-year 
operator of six horse-racing tracks, including its namesake, 
the famed home of the Kentucky Derby. It’s also converting 
its mass-market advertising to a more one-to-one approach. 

Before Atique Shah joined the company in late 2003 as 
vice president of CRM and technology solutions, Churchill 
Downs had just assumed that the aggregate data culled from 
its Twin Spires loyalty club could be broken into four distinct 
buckets of customers. Shah wasn’t so sure. So he got budget 
approval to obtain a range of technologies, starting with 
Epiphany Inc.’s CRM software and supported by SPSS 
Inc.’s Clementine data-mining tool and IBM’s Ascential 
data-extraction and transformation software. Shah then ran 
the data through Clementine and discovered that there were 
actually nine aggregate customer types, which was an indica- 
tion that its previous marketing efforts probably weren’t as 
useful or relevant as they should have been. Asked how close 
he is to achieving a 360-degree view of his customers, he laughs 
and says, “I believe we’re probably at about 190 degrees.” 
Churchill Downs has 27 sources of customer information, and 
refereeing among them is a constant problem, Shah says. 

To reflect the more-detailed profiles that emerged, Shah 
transitioned from generic labels for the old buckets—platinum, 
gold, silver, and bronze—to descriptions that hinted at the 
personalities of each segment. So a female customer who 
only visits the track a few times a year and is there more for 
the social spectacle than for the betting is now known as a 
“Seldom Sally,” and a wealthy man in his fifties who spends 
more than $100,000 a year at the track and is confident in 
his racing knowledge is a “Smarty Steve.” 

Shah published the new intelligence to the company’s 
various tracks and engineered a test campaign with Arling- 
ton Park near Chicago. Arlington’s staff selected 55,000 


CASE STUDY QUESTIONS 


1. What are the business benefits of CRM implementa- 
tions for organizations such as Berlin Packaging and 
Churchill Downs? What other uses of CRM would you 
recommend to the latter? Provide several alternatives. 


2. Do you agree with the idea that smaller organizations 
are better positioned to be more effective users of CRM 
than larger ones? Why or why not? Justify your answer. 


3. One of the main issues noted in the case is the impor- 
tance of “good” data for the success of CRM imple- 
mentations. We discussed many of these in Chapter 5, 
when we compared the file processing and database 
management approaches to data resource management. 
Which of the problems discussed there do you see 
present in this case? How do CRM applications attempt 
to address them? Use examples from the case to illus- 
trate your answer. 


households out of its database and then broke them into the 
nine customer segments Clementine had spit out. Each dis- 
tinct group of customers then received direct-mail advertise- 
ments that reflected its profile, with information and offers 
that jibed with its attributes. The response rate was impres- 
sive, with nearly 10 percent of those who received the mail- 
ing coming to the park during the following season. 

“What was more amazing was that the group of custom- 
ers they had segmented generated $1.6 million in the first 
two weeks,” Shah says. “A year earlier, the same customers 
generated $950,000.” 

The success of that campaign underscored the value of the 
data that Churchill Downs had, in many ways, been sitting on. 

However small and midsize companies implement CRM, 
it’s clear that data can translate into increased sales. 

ISM’s Goldenberg reiterates, though, that companies 
need to make sure data are in order before they launch any 
major CRM initiative. Even though he believes that in most 
cases, it’s the CRM application, not the data, that’s providing 
the real business value, it’s also clear that one can’t thrive with- 
out the other. “Without accurate, complete, and comprehen- 
sive data, any CRM effort will be less than optimal,” he says. 

Which brings us back to the prediction that NetSuite’s 
Nelson makes: A few years from now, today’s small compa- 
nies will be running circles around their larger competitors, 
primarily because establishing a master record of customer 
data will prove to be a less-daunting task for them. The way 
Nelson sees it, the decision to jump on establishing unified 
sources of customer data will pay off for the emerging com- 
panies that do so. “Once you get your data in place, things 
that were very complex before become quite trivial,” he says. 

Maybe not as trivial as sipping coffee and nibbling on a 
Danish pastry, but wouldn’t it be great if it were pretty darn 
close? 


Source: Adapted from Tony Kontzer, “CRMs Secret Is in the Data,” 
InformationWeek, August 15, 2005; and Charles Babcock, “Looking for a 
Clearer View of the Customer,” InformationWeek, August 8, 2005. 


REAL WORLD ACTIVITIES 


1. NetSuite Inc. is a leading provider of on-demand enter- 
prise applications, including CRM as featured in the 
case. Other important players in this market include 
Salesforce.com and Siebel On Demand. Use the Inter- 
net to research all three product offerings and discover 
how these companies are faring in this increasingly 
competitive industry. Compare and contrast their prod- 
uct features to understand whether offerings are be- 
coming differentiated or more alike as a result. 


2. The CRM implementations in this case highlight the 
critical importance of information about customers, 
their preferences and activities, and how to use it to 
understand and develop better marketing solutions. On 
the other hand, the degree to which these companies 
are able to target customers individually may be of con- 
cern to some people. Break into small groups with your 
classmates to discuss these concerns, as well as ways for 
both companies and their customers to benefit from 
CRM systems, and still protect customer privacy. 


Chapter 7 / e-Business Systems @ 263 


FIGURE 7.2 The new product development process in a manufacturing company. This is an example of a business 
process that must be supported by cross-functional information systems that cross the boundaries of several business functions. 
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FIGURE 7.3 


This enterprise application 
architecture presents an 
overview of the major 
cross-functional enterprise 
applications and their 
interrelationships. 
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Notice that instead of concentrating on traditional business functions, or only 
supporting the internal business processes of a company, enterprise applications are 
focused on accomplishing fundamental business processes in concert with a compa- 
ny’s customer, supplier, partner, and employee stakeholders. Thus, enterprise re- 
source planning (ERP) concentrates on the efficiency of a firm’s internal production, 
distribution, and financial processes. Customer relationship management (CRM) fo- 
cuses on acquiring and retaining profitable customers via marketing, sales, and ser- 
vice processes. Partner relationship management (PRM) aims at acquiring and 
retaining partners who can enhance the selling and distribution of a firm’s products 
and services. Supply chain management (SCM) focuses on developing the most effi- 
cient and effective sourcing and procurement processes with suppliers for the prod- 
ucts and services needed by a business. Knowledge management (KM) applications 
focus on providing a firm’s employees with tools that support group collaboration 
and decision support. 

We will discuss CRM, ERP, and SCM applications in detail in this section 
and cover knowledge management applications in Chapter 9. Now let’s look at a 
real-world example of some of the challenges involved in rolling out global, cross- 
functional systems. 
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Partner Relationship Management 


Source: Adapted from Mohan Sawhney and Jeff Zabin, Seven Steps to Nirvana: Strategic Insights 
into e-Business Transformation (New York: McGraw-Hill, 2001), p. 175. 
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Ogilvy & Mather 
and MetLife: The 
Interpersonal 
Challenges of 
Implementing 
Global 
Applications 


EA 


Getting All the 
Geese Lined 
Up: Managing 
at the 
Enterprise 
Level 


Atefeh Riazi’s quarter-million frequent-flier miles are testament to the fact that it’s not 
such a small planet after all. As CIO at Ogilvy & Mather Worldwide, Riazi has spent 
the past years rolling out global applications, such as collaborative workflow systems, 
creative asset management, knowledge management, messaging, and security for the 
New York City-based marketing giant. Most recently, Riazi has been trying to con- 
vince the Asian, European, and Latin American offices to replace their legacy systems 
with North America’s SAP enterprise resource planning system for finance, human 
resources, and production. A common enterprise system, she says, would provide 
Ogilvy’s 400 offices in more than 100 countries with access to real-time information 
so they can make quick decisions, better respond to market changes, and cut costs. 

The fact is that globalization adds new dynamics to the workplace, and CIOs 
who stick to the true-blue American business formula will fail. They must abandon 
the idea of force-fitting their visions into worldwide offices and move toward a glo- 
bal infrastructure built collaboratively by staff from around the world. 

‘Take the company that rolls out a global system with high-bandwidth require- 
ments. That system might not be feasible for IT directors in the Middle East or parts 
of Asia, where the cost of bandwidth is higher than in New York. Is the standardized 
system multilingual? Can it convert different currencies? Can it accommodate com- 
plex national tax laws? 

For global projects, working virtually is critical, but it’s also one of the biggest 
challenges. “You’re dealing with different languages, different cultures, different 
time zones,” says George Savarese, vice president of operations and technology 
services at New York City-based MetLife. His 6 p.m. Monday meeting, for in- 
stance, falls at 8 a.m. in South Korea and 9 p.m. in Brazil. Savarese adds, however, 
that telephone and e-mail alone won’t cut it. “You really have to be there, in their 
space, understanding where it’s at,” he says, adding that he spends about half of each 
month abroad. 

“Globalization challenges your people skills every day,” says Ogilvy’s Riazi. For 
example, workers in the United Kingdom often rely heavily on qualitative research; 
they take their time in making decisions, as opposed to Americans, who tend to be 
action-oriented. So, in a recent attempt to get offices in the United States and the 
United Kingdom to collaborate on a common system rollout, Riazi hit a wall of re- 
sistance because she didn’t spend enough time going over analytical arguments with 
the people in the U.K. office. 

Having international teams run global projects goes a long way toward mending 
fences. Ogilvy, for instance, manages a financial reporting project out of Ireland. 
“The IT director there has a European point of view, so we’re not going to be blind- 
sided by something that isn’t a workable solution,” she says. 

“We have let control go,” she says of Ogilvy’s New York headquarters. “A lot 
of global companies cannot let go of that control. They’re holding so tight. It’s 
destructive.” 


Source: Adapted from Melissa Solomon, “Collaboratively Building a Global Infrastructure,” CIO Magazine, June 1, 2003. 


Here’s a question you probably never expected to find in your information system text: 
Have you ever noticed how geese fly? They start out as a seemingly chaotic flock of 
birds but very quickly end up flying in a V-shape or echelon pattern like that shown 
in Figure 7.4. As you might imagine, this consistency in flying formation is not an ac- 
cident. By flying in this manner, each bird receives a slight, but measurable, benefit in 
reduced drag from the bird in front. This makes it easier for all of the birds to fly long 
distances than if they just took up whatever portion of the sky they happened to find. 
Of course, the lead bird has the toughest job, but geese have figured out a way to help 
there, as well. Systematically, one of the birds from the formation will fly up to relieve 


FIGURE 7.4 


Geese fly in a highly 
organized and efficient V- 
shaped formation—much 
like a well-run business. 
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The Business 
Focus 
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Source: © Warren Jacobi/Corbis. 


the current lead bird. In this way, the entire flock shares the load as they all head in the 
same direction. 

Okay, so what does this have to do with information systems? This chapter will 
focus on systems that span the enterprise and that are intended to support three enter- 
prisewide operations: customer relationships, resource planning, and supply chain. 

Each operation requires a unique focus and, thus, a unique system to support it, 
but they all share one common goal: to get the entire organization to line up and head 
in the same direction, just as the geese do. 

We could cover these important enterprise systems in any order, and if we asked 
three people how to do it, we would likely get three different approaches. For our 
purposes, we will start with the focus of every business: the customer. From there, we 
will expand our view to the back-office operations and finally to systems that manage 
the movement of raw materials and finished goods. The end result, of course, is that 
we get all the “geese” in the business to fly in the same direction in as efficient a man- 
ner as possible. 


Today, customers are in charge. It is easier than ever for customers to comparison 
shop and, with a click of the mouse, to switch companies. As a result, customer rela- 
tionships have become a company’s most valued asset. These relationships are worth 
more than the company’s products, stores, factories, Web addresses, and even employees. 
Every company’s strategy should address how to find and retain the most profitable 
customers possible. 


The primary business value of customer relationships today is indisputable. That’s 
why we emphasized in Chapter 2 that becoming a customer-focused business was 
one of the top business strategies that can be supported by information technology. 
Thus, many companies are implementing customer relationship management 
(CRM) business initiatives and information systems as part of a customer-focused or 
customer-centric strategy to improve their chances for success in today’s competi- 
tive business environment. In this section, we will explore basic CRM concepts and 
technologies, as well as examples of the benefits and challenges faced by companies 
that have implemented CRM systems as part of their customer-focused business 
strategy. 
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What Is CRM? 
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FIGURE 7.5 


The major application 
clusters in customer 
relationship management. 


Managing the full range of the customer relationship involves two related objectives: one, 
to provide the organization and all of its customer-facing employees with a single, com- 
plete view of every customer at every touch point and across all channels; and, two, to pro- 
vide the customer with a single, complete view of the company and its extended channels. 


This quote is why companies are turning to customer relationship management 
(CRM) to improve their customer focus. CRM uses information technology to create 
a cross-functional enterprise system that integrates and automates many of the 
customer-serving processes in sales, marketing, and customer services that interact with 
a company’s customers. CRM systems also create an IT framework of Web-enabled 
software and databases that integrates these processes with the rest of a company’s 
business operations. CRM systems include a family of software modules that provides 
the tools that enable a business and its employees to provide fast, convenient, de- 
pendable, and consistent service to its customers. Siebel Systems, Oracle, SAP AG, 
IBM, and Epiphany are some of the leading vendors of CRM software. Figure 7.5 
illustrates some of the major application components of a CRM system. Let’s take a 
look at each of them. 


CRM software helps sales, marketing, and service professionals capture and track 
relevant data about every past and planned contact with prospects and customers, as 
well as other business and life cycle events of customers. Information is captured from 
all customer towchpoints, such as telephone, fax, e-mail, the company’s Web site, retail 
stores, kiosks, and personal contact. CRM systems store the data in a common cus- 
tomer database that integrates all customer account information and makes it available 
throughout the company via Internet, intranet, or other network links for sales, 
marketing, service, and other CRM applications. 


A CRM system provides sales representatives with the software tools and company 
data sources they need to support and manage their sales activities and optimize 
cross-selling and up-selling. Cross-selling is an approach in which a customer of one 
product or service, say, auto insurance, might also be interested in purchasing a 
related product or service, say, homeowner’s insurance. By using a cross-selling 
technique, sales representatives can better serve their customers while simultane- 
ously improving their sales. Up-selling refers to the process of finding ways to sell 
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a new or existing customer a better product than they are currently seeking. Ex- 
amples include sales prospect and product information, product configuration, 
and sales quote generation capabilities. CRM also provides real-time access to a 
single common view of the customer, enabling sales representatives to check on all 
aspects of a customer’s account status and history before scheduling their sales 
calls. For example, a CRM system would alert a bank sales representative to call 
customers who make large deposits to sell them premier credit or investment ser- 
vices. Or it would alert a salesperson of unresolved service, delivery, or payment 
problems that could be resolved through a personal contact with a customer. 


CRM systems help marketing professionals accomplish direct marketing campaigns by 
automating such tasks as qualifying leads for targeted marketing and scheduling and 
tracking direct marketing mailings. Then the CRM software helps marketing profes- 
sionals capture and manage prospect and customer response data in the CRM data- 
base and analyze the customer and business value of a company’s direct marketing 
campaigns. CRM also assists in the fulfillment of prospect and customer responses 
and requests by quickly scheduling sales contacts and providing appropriate informa- 
tion about products and services to them, while capturing relevant information for the 
CRM database. 


A CRM system provides service representatives with software tools and real-time 
access to the common customer database shared by sales and marketing professionals. 
CRM helps customer service managers create, assign, and manage requests for service 
by customers. Call center software routes calls to customer support agents on the basis 
of their skills and authority to handle specific kinds of service requests. Help desk 
software provides relevant service data and suggestions for resolving problems for 
customer service reps who assist customers with problems with a product or service. 
Web-based self-service enables customers to easily access personalized support infor- 
mation at the company Web site, while giving them an option to receive further assistance 
online or by phone from customer service personnel. 


Consider the following: 


e It costs six times more to sell to a new customer than to sell to an existing one. 


e Atypical dissatisfied customer will tell eight to ten people about his or her 
experience. 


e Acompany can boost its profits 85 percent by increasing its annual customer 
retention by only 5 percent. 


e The odds of selling a product to a new customer are 15 percent, whereas the odds 
of selling a product to an existing customer are 50 percent. 


e Seventy percent of complaining customers will do business with the company 
again if it quickly takes care of a service problem. 


That’s why enhancing and optimizing customer retention and loyalty is a major 
business strategy and primary objective of customer relationship management. CRM 
systems try to help a company identify, reward, and market to their most loyal and 
profitable customers. CRM analytical software includes data mining tools and other 
analytical marketing software, and CRM databases may consist of a customer data 
warehouse and CRM data marts. These tools are used to identify profitable and loyal 
customers and to direct and evaluate a company’s targeted marketing and relationship 
marketing programs toward them. Figure 7.6 is an example of part of a proposed 
Web-based report format for evaluating Charles Schwab & Co.’s customer retention 
performance. 
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FIGURE 7.6 Proposed report format for evaluating the customer retention performance of Charles Schwab & Co. 
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Figure 7.7 illustrates another way to think about the customer and business value and 
components of customer relationship management. We can view CRM as an inte- 
grated system of Web-enabled software tools and databases that accomplish a variety 
of customer-focused business processes that support the three phases of the relation- 
ship between a business and its customers. 
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e Acquire. A business relies on CRM software tools and databases to help it acquire 
new customers by doing a superior job of contact management, sales prospecting, 
selling, direct marketing, and fulfillment. The goal of these CRM functions is to 
help customers perceive the value of a superior product offered by an outstanding 
company. 

e Enhance. Web-enabled CRM account management and customer service and 
support tools help keep customers happy by supporting superior service from a 
responsive, networked team of sales and service specialists and business partners. 
And CRM sales force automation and direct marketing and fulfillment tools help 
companies cross-sell and up-sell to their customers, thus increasing their profit- 
ability to the business. The value perceived by customers is the convenience of 
one-stop shopping at attractive prices. 


e Retain. CRM analytical software and databases help a company proactively iden- 
tify and reward its most loyal and profitable customers to retain and expand their 
business via targeted marketing and relationship marketing programs. ‘The value 
perceived by customers is of a rewarding personalized business relationship with 
“their company.” 


The potential business benefits of customer relationship management are many. For 
example, CRM allows a business to identify and target its best customers—those who 
are the most profitable to the business—so they can be retained as lifelong customers 
for greater and more profitable services. It makes possible real-time customization and 
personalization of products and services based on customer wants, needs, buying hab- 
its, and life cycles. CRM can also keep track of when a customer contacts the company, 
regardless of the contact point. In addition, CRM systems can enable a company to 
provide a consistent customer experience and superior service and support across all 
the contact points a customer chooses. All of these benefits would provide strategic 
business value to a company and major customer value to its customers. 


Wouldn’t it be nice if just once, one of those surly airline employees offered a sincere 
and unequivocal apology for losing your luggage or for a delayed flight? If you fly 
first class with Continental Airlines, you may finally get that apology. 

Since 2001, the Houston-based carrier has been enhancing the in-flight reports 
it provides to flight attendants just before takeoff with more detailed information on 
passengers. For example, in addition to indicating which passengers ordered special 
meals, the expanded reports flag the airline’s high-value customers and detail such 
things as whether they’ve had their luggage lost in the recent past or experienced a 
delayed flight. Armed with this information, flight attendants can now approach 
these customers during the flight to apologize for the inconveniences. Such high- 
touch, personalized service increases customer loyalty, particularly among Continen- 
tal’s most valuable patrons, and that loyalty in turn drives revenue. 

Continental breaks customers into different levels of profitability: Since building 
its new system, the airline reports earning an average of $200 in revenue on each of 
its 400,000 valuable customers and an additional $800 in revenue from each of the 
35,000 customers it places in its most profitable tier—all because it accords them better 
service. 

Continental’s desire to improve its ranking in a competitive industry drove it to 
build a real-time enterprise data warehouse (EDW). When the EDW was first being 
developed in 1998, its initial purpose was to bring data from some 27 systems to- 
gether so that the company could more accurately forecast revenue. Since then, the 
company has used it to determine if customer loyalty initiatives really affect revenue. 
By testing a sample of 30,000 customers who experienced delays, Continental found 
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that those individuals to whom the airline sent a letter of apology and some sort of 
compensation (either in the form of a free cocktail on their next flight or extra 
frequent flier miles) forgot the event and didn’t hold a grudge. In fact, Continental 
says that revenue from those passengers who received letters jumped 8 percent. 

Using operational and customer data in the EDW, the data warehousing team 
developed a solution to one of the biggest headaches gate agents face: accommodat- 
ing passengers inconvenienced by a cancellation or delay. The team created a pro- 
gram that automates the rebooking process. Before the program was developed, gate 
agents had to figure out on their own how to reroute passengers. Now, when a can- 
cellation or delay occurs, the system does the work for them. For example, when the 
system identifies a high-value customer whose flight has been cancelled, the gate 
agent may decide to put that traveler on a competitor’s flight just to make the indi- 
vidual happy and to get him on his way as fast as possible. 

“Before the data warehouse, the person who yelled the loudest got the best ser- 
vice. Now our most valuable customers get the best service,” says Alicia Acebo, Con- 
tinental’s data warehousing director. 


Source: Adapted from Meridith Levinson, “Getting to Know Them,” CIO Magazine, May 9, 2007. 


The business benefits of customer relationship management are not guaranteed but 
instead have proven elusive for many companies. Surveys by industry research groups 
include a report that over 50 percent of CRM projects did not produce the results that 
were promised. In another research report, 20 percent of businesses surveyed reported 
that CRM implementations had actually damaged long-standing customer relation- 
ships. And in a survey of senior management satisfaction with 25 management tools, 
CRM ranked near the bottom in user satisfaction, even though 72 percent expected to 
have CRM systems implemented shortly. 

What is the reason for such a high rate of failure or dissatisfaction with CRM initia- 
tives? Research shows that the major reason is a familiar one: lack of understanding and 
preparation. That is, too often business managers rely on a major new application of 
information technology (like CRM) to solve a business problem without first developing 
the business process changes and change management programs that are required. For 
example, in many cases, failed CRM projects were implemented without the participa- 
tion of the business stakeholders involved. Therefore, employees and customers were 
not prepared for the new processes or challenges that were part of the new CRM imple- 
mentation. We will discuss the topic of failures in information technology management, 
system implementation, and change management further in subsequent chapters. 


‘The multiple mergers that formed insurer Unum Group in the late 1990s aggregated 
billions in revenue, assembled thousands of employees—and created a quagmire of 
customer data systems that couldn’t talk to each other. In all, between Provident, 
Colonial, Paul Revere, and Unum there were 34 disconnected policy and claims 
back-office systems, all loaded with critical customer data. As a result, “it was very 
difficult to get your hands around the information,” understates Bob Dolmovich, 
Unum Group’s VP of business integration and data architecture. One Unum Group 
customer’s account, for instance, might exist in multiple places within the newly 
combined company, leading, of course, to a great deal of waste. 

For the first couple of years after the mergers, Unum Group used a homegrown 
data-store solution as a band aid. But by 2004 the $10 billion disability insurer felt 
compelled to embark on a new master data management strategy aimed at uniting 
the company’s disparate pockets of customer data, including account activity, 
premiums, and payments. 
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Core to Unum Group’s strategy would be a customer data integration (CDI) 
hub, built on service-oriented architecture using a standard set of protocols for con- 
necting applications via the Web (in effect, Web services). The project, begun in 
early 2005, has already improved data quality, soothed the multiple customer records 
headaches, and created the possibility for a companywide, in-depth customer analy- 
sis. But as Dolmovich acknowledges, there’s still a long way to go. Of those original 
34 systems, he has been able to get rid of only four to date. But he’s still optimistic. 

Despite the long, slow slog, Dolmovich is hoping that the new CDI approach 
will ultimately give his company the 360-degree view of the customer that has been 
promised by vendors since the dawn of CRM. In the late 1990s, enterprise software 
vendors like Oracle, PeopleSoft, and Siebel sold the single-customer view as CRM’s 
holy grail. But implementation flameouts and legacy integration nightmares soured 
many CIOs on these expensive enterprisewide rollouts. 

A CDI hub differs from a traditional CRM solution in that a CDI hub allows a 
company to automatically integrate all of its customer data into one database while 
ensuring the quality and accuracy of the data before it is sent to the hub’s central 
store for safekeeping. A standalone CRM system can’t do that because it can’t be in- 
tegrated with the billing, marketing, ERP, and supply chain systems that house cus- 
tomer data, and it has no way to address inconsistent data across platforms. 

Dolmovich says the first data loaded into the CDI hub in late 2005 came from 
business customers and brokers. 

With the new system, Dolmovich says, “We are now able to assimilate and dis- 
play a broker’s entire block of business and create some statistics and a profile of our 
relationship with that broker.” Unum Group is now working to create individual 
profiles of employer customers so that every time a new customer account is created 
or accessed—perhaps to change an address or add new customer information—all 
employees of the insurance company, regardless of what system they are using, will 
see that change at the same time. “The desired end state is a CDI hub that has infor- 
mation about all customers across all products,” he says. 


Source: Adapted from Thomas Wailgum, “The Quest for Customer Data Integration,” CIO Magazine, August 1, 2006. 


What do Microsoft, Coca-Cola, Cisco, Eli Lilly, Alcoa, and Nokia have in common? 
Unlike most businesses, which operate on 25-year-old back-office systems, these market 
leaders reengineered their businesses to run at breakneck speed by implementing a trans- 
actional backbone called enterprise resource planning (ERP). These companies credit their 
ERP systems with having helped them reduce inventories, shorten cycle times, lower costs, 
and improve overall operations. 


Businesses of all kinds have now implemented enterprise resource planning (ERP) 
systems. ERP serves as a cross-functional enterprise backbone that integrates and au- 
tomates many internal business processes and information systems within the manu- 
facturing, logistics, distribution, accounting, finance, and human resource functions of 
a company. Large companies throughout the world began to install ERP systems in 
the 1990s as a conceptual framework and catalyst for reengineering their business 
processes. ERP also served as the vital software engine needed to integrate and accom- 
plish the cross-functional processes that resulted. Now, ERP is recognized as a neces- 
sary ingredient that many companies need in order to gain the efficiency, agility, and 
responsiveness required to succeed in today’s dynamic business environment. 


ERP is the technological backbone of e-business, an enterprisewide transaction framework 
with links into sales order processing, inventory management and control, production and 
distribution planning, and finance. 
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Enterprise resource planning (ERP) is a cross-functional enterprise system driven by 
an integrated suite of software modules that supports the basic internal business proc- 
esses of a company. For example, ERP software for a manufacturing company will 
typically process the data from, and track the status of, sales, inventory, shipping, and 
invoicing, as well as forecast raw material and human resource requirements. Figure 7.8 
presents the major application components of an ERP system. 

ERP gives a company an integrated real-time view of its core business processes, 
such as production, order processing, and inventory management, tied together by the 
ERP application software and a common database maintained by a database manage- 
ment system. ERP systems track business resources (e.g., cash, raw materials, produc- 
tion capacity) and the status of commitments made by the business (e.g., customer 
orders, purchase orders, employee payroll), no matter which department (e.g., manu- 
facturing, purchasing sales, accounting) has entered the data into the system. 

ERP software suites typically consist of integrated modules of manufacturing, dis- 
tribution, sales, accounting, and human resource applications. Examples of manufac- 
turing processes supported are material requirements planning, production planning, 
and capacity planning. Some of the sales and marketing processes supported by ERP 
are sales analysis, sales planning, and pricing analysis, while typical distribution appli- 
cations include order management, purchasing, and logistics planning. ERP systems 
support many vital human resource processes, from personnel requirements planning 
to salary and benefits administration, and accomplish most required financial record 
keeping and managerial accounting applications. Figure 7.9 illustrates the processes 


FIGURE 7.9 The business processes and functions supported by the ERP system implemented by Colgate-Palmolive Co. 
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supported by the ERP system installed by Colgate-Palmolive Co. Let’s take a closer 
look at its experience with ERP. 


Colgate-Palmolive is a global consumer products company that implemented the 
SAP R/3 enterprise resource planning system. Colgate embarked on an implementa- 
tion of SAP R/3 to allow the company to access more timely and accurate data, get 
the most out of working capital, and reduce manufacturing costs. An important fac- 
tor for Colgate was whether it could use the software across the entire spectrum of 
its business. Colgate needed the ability to coordinate globally and act locally. The 
implementation of SAP across the Colgate supply chain contributed to increased 
profitability. Now installed in operations that produce most of Colgate’s worldwide 
sales, SAP was expanded to all Colgate divisions worldwide. Global efficiencies in 
purchasinge—combined with product and packaging standardization—also produced 
large savings. 


e Before ERP, it took Colgate U.S. anywhere from one to five days to acquire an 
order and another one to two days to process the order. Now, order acquisition 
and processing combined take four hours, not up to seven days. Distribution 
planning and picking used to take up to four days; today, they take 14 hours. 

In total, the order-to-delivery time has been cut in half. 


e Before ERP, on-time deliveries used to occur only 91.5 percent of the time, and 
cases ordered were delivered correctly 97.5 percent of the time. After R/3, the 
figures are 97.5 percent and 99.0 percent, respectively. 


e After ERP, domestic inventories have dropped by one-third and receivables out- 
standing have dropped to 22.4 days from 31.4. Working capital as a percentage 
of sales has plummeted to 6.3 percent from 11.3 percent. Total delivered cost 
per case has been reduced by nearly 10 percent. 


As the example of Colgate-Palmolive illustrates, ERP systems can generate significant 
business benefits for a company. Many other companies have found major business 
value in their use of ERP in several basic ways. 


© Quality and Efficiency. ERP creates a framework for integrating and improving 
a company’s internal business processes that results in significant improvements 
in the quality and efficiency of customer service, production, and distribution. 


e Decreased Costs. Many companies report significant reductions in transaction 
processing costs and hardware, software, and IT support staff compared with the 
nonintegrated legacy systems that were replaced by their new ERP systems. 


e Decision Support. ERP quickly provides vital, cross-functional information on 
business performance to managers, which significantly improves their ability to 
make better decisions in a timely manner across the entire business enterprise. 


e Enterprise Agility. Implementing ERP systems breaks down many former 
departmental and functional walls or “silos” of business processes, information 
systems, and information resources. This agility results in more flexible organiza- 
tional structures, managerial responsibilities, and work roles and therefore a more 
agile and adaptive organization and workforce that can more easily capitalize on 
new business opportunities. 


An ERP implementation is like the corporate equivalent of a brain transplant. We pulled 
the plug on every company application and moved to PeopleSoft software. The risk was 
certainly disruption of business, because if you do not do ERP properly, you can kill your 
company, guaranteed. 
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So says Jim Prevo, CIO of Green Mountain Coffee Roasters in Vermont, com- 
menting on its successful implementation of an ERP system. Although the benefits of 
ERP are many, the costs and risks are also considerable, as we will continue to see in 
some of the real-world cases and examples in the text. Figure 7.10 illustrates the rela- 
tive size and types of costs of implementing an ERP system in a company. Notice that 
hardware and software costs are a small part of total costs, and the costs of developing 
new business processes (reengineering) and preparing employees for the new system 
(training and change management) make up the bulk of implementing a new ERP 
system. Converting data from previous legacy systems to the new cross-functional 
ERP system is another major category of ERP implementation costs. 

The costs and risks of failure in implementing a new ERP system are substantial. 
Most companies have had successful ERP implementations, but a sizable minority of 
firms experienced spectacular and costly failures that heavily damaged their overall busi- 
ness. Big losses in revenue, profits, and market share resulted when core business proc- 
esses and information systems failed or did not work properly. In many cases, orders and 
shipments were lost, inventory changes were not recorded correctly, and unreliable in- 
ventory levels caused major stockouts to occur for weeks or months. Companies like 
Hershey Foods, Nike, A-DEC, and Connecticut General sustained losses running into 
hundreds of millions of dollars in some instances. In the case of FoxMeyer Drugs, a 
$5 billion pharmaceutical wholesaler, the company had to file for bankruptcy protection 
and then was bought out by its arch competitor McKesson Drugs. 


American LaFrance (ALF), a maker of emergency vehicles such as fire trucks and 
ambulances, filed for bankruptcy protection on January 28, 2008; in court papers, it 
is claiming that their software vendor’s work installing and transitioning to a new 
ERP system contributed to inventory and production problems. Officials at American 
LaFrance, which has been in business making fire and emergency response equip- 
ment since 1832, stated that “this is a legal ‘reorganization’ process to make the 
company stronger.” 

The bankruptcy filing was due to “operational disruptions caused by the installation 
of a new ERP system,” as well as obsolete inventory that American LaFrance’s previous 
owner, Freightliner, did not properly disclose. A New York-based investment company, 
Patriarch Partners, bought American LaFrance in late 2005 for an undisclosed sum. 

“As a result of the unanticipated obsolescence of inventory and the ongoing ERP 
problems, American LaFrance has incurred approximately $100 million in secured 
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debt since it purchased its business,” company officials said in a statement. “These 
problems have resulted in slowed production, a large unfulfilled backlog, and a lack 
of sufficient funds to continue operating.” 

ALF had purchased Freightliner’s business in 2005. As part of the purchase agree- 
ment, Freightliner had managed inventory, payroll, and manufacturing processes 
until June 2007, according to news reports. “But American LaFrance, which was 
preparing to take over those functions by creating its own in-house system, fumbled 
the changeover,” wrote The Post and Courier of Charleston, South Carolina. 

Citing company statements, the newspaper added: “The two systems were not 
entirely compatible, and a wide range of financial information was lost in the change- 
over. Inventory was in disarray, and workers were unable to find the parts they 
needed.” According to U.S. Bankruptcy Court documents, the new system ALF set 
up with the help of a software vendor had “serious deficiencies” that had “a crippling 
impact” on the company’s operations. 

The multitude of business and IT problems “forced American LaFrance to seek 
protection from its more than 1,000 creditors, who collectively are owed more than 
$200 million,” the paper reported. Results from a recent CIO survey on ERP sys- 
tems and their importance to twenty-first-century businesses explain how and why 
technology disasters like American LaFrance’s can happen. More than 85 percent of 
survey respondents agreed or strongly agreed that their ERP systems were essential 
to the core of their businesses, and that they “could not live without them.” 


Source: Adapted from Jennifer Zaino, “Modern Workforce: Capital One Puts ERP at Core of Work,” InformationWeek, 
July 11, 2005. 


What have been the major causes of failure in ERP projects? In almost every case, the 
business managers and IT professionals of these companies underestimated the com- 
plexity of the planning, development, and training that were needed to prepare for a 
new ERP system that would radically change their business processes and information 
systems. Failure to involve affected employees in the planning and development phases 
and to change management programs, or trying to do too much too fast in the conver- 
sion process, also were typical causes of failed ERP projects. Insufficient training in 
the new work tasks required by the ERP system and failure to do enough data conver- 
sion and testing were other causes of failure. In many cases, ERP failures were also 
due to overreliance by company or IT management on the claims of ERP software 
vendors or on the assistance of prestigious consulting firms hired to lead the imple- 
mentation. The following experience of a company that did it right give us a helpful 
look at what is needed for a successful ERP implementation. 


Just a few years ago at Capital One Financial Corp., it took 10 human-resources 
(HR) specialists to sign off on one change-of-address form. With thousands of em- 
ployees worldwide, that’s a lot of paper-pushing. Today, address changes are done via 
a self-service application that has freed HR to devote time to strategic staffing, pro- 
gram planning, and change management. 

This example illustrates a big change that has taken place at the $2.6 billion-a- 
year financial services company since it began to roll out PeopleSoft applications. 
“Tt’s a cultural change that has freed people to not deal with minutiae but to deal with 
business value,” says Gregor Bailar, executive VP and CIO. 

“Tt really has been transformative.” Bailar envisions more automation ahead, with 
financials following in the footsteps of HR’s “lean-process” design to deal with the 
mountain of data requests the financials team receives and processes within the group. 
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The PeopleSoft ERP system, which serves as Capital One’s backbone for finan- 
cials, HR, asset management, and supply chain processes, supports about 18,000 us- 
ers, including Capital One’s 15,000 associates and some business partners. The 
applications are accessible via a Web portal based on BEA Systems Inc.’s technology. 

Capital One is exploring the possibility of partnering with ERP application ser- 
vice providers, now that the hard work of correcting data and linking processes is 
done. Running the applications may be more of a commodity job at this point, but 
the applications themselves serve as a pillar for the company’s future-of-work initia- 
tive. Bailar describes this as “a very mobile, interactive, collaborative environment” 
designed to support the requirements of the company’s biggest asset, its knowledge 
workers. It’s characterized not only by extensive Wi-Fi access, VoIP-enabled laptops, 
instant messaging, and BlackBerrys, but also by workflows that, for the most part, 
come to users electronically. Says Bailar, “Everyone’s daily life is kind of drawn back 
to this suite of apps.” 


Source: Adapted from Jennifer Zaino, “Modern Workforce: Capital One Puts ERP at Core of Work,” InformationWeek, 
July 11, 2005. 


Starting an e-business takes ideas, capital, and technical savvy. Operating one, however, 
takes supply chain management (SCM) skills. A successful SCM strategy is based on 
accurate order processing, just-in-time inventory management, and timely order 
fulfillment. SCM’s increasing importance illustrates how a tool that was a theoretical 
process 10 years ago is now a hot competitive weapon. 


That’s why many companies today are making supply chain management a top 
strategic objective and major e-business application development initiative. Funda- 
mentally, supply chain management helps a company get the right products to the 
right place at the right time, in the proper quantity and at an acceptable cost. The goal 
of SCM is to manage this process efficiently by forecasting demand; controlling 
inventory; enhancing the network of business relationships a company has with 
customers, suppliers, distributors, and others; and receiving feedback on the status of 
every link in the supply chain. To achieve this goal, many companies today are turning 
to Internet technologies to Web-enable their supply chain processes, decision making, 
and information flows. 


Legacy supply chains are clogged with unnecessary steps and redundant stockpiles. For in- 
stance, a typical box of breakfast cereal spends an incredible 104 days getting from factory 
to supermarket, struggling its way through an unbelievable maze of wholesalers, distrib- 
utors, brokers, and consolidators, each of which has a warehouse. The e-commerce oppor- 
tunity lies in the fusing of each company’s internal systems to those of its suppliers, 
partners, and customers. This fusion forces companies to better integrate interenterprise 
supply chain processes to improve manufacturing efficiency and distribution effectiveness. 


Supply chain management (SCM) is a cross-functional interenterprise system that 
uses information technology to help support and manage the links between some of a 
company’s key business processes and those of its suppliers, customers, and business 
partners. The goal of SCM is to create a fast, efficient, and low-cost network of busi- 
ness relationships, or supply chain, to get a company’s products from concept to mar- 
ket (see Figure 7.11). 

What exactly is a company’s supply chain? Let’s suppose a company wants to build 
and sell a product to other businesses. To accomplish this, it must buy raw materials 
and a variety of contracted services from other companies. The interrelationships with 
suppliers, customers, distributors, and other businesses that are needed to design, 
build, and sell a product make up the network of business entities, relationships, and 
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Source: Gary Gladstone Studio Inc./ Getty Images. 


processes that is called a supply chain. And because each supply chain process should 
add value to the products or services a company produces, a supply chain is frequently 
called a value chain, a different but related concept we discussed in Chapter 2. In any 
event, many companies today are using Internet technologies to create interenterprise 
e-business systems for supply chain management that help a company streamline its 
traditional supply chain processes. 

Figure 7.12 illustrates the basic business processes in the supply chain life cycle 
and the functional SCM processes that support them. It also emphasizes how many 
companies today are reengineering their supply chain processes, aided by Internet 
technologies and supply chain management software. For example, the demands of 
today’s competitive business environment are pushing manufacturers to use their 
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intranets, extranets, and e-commerce Web portals to help them reengineer their rela- 
tionships with their suppliers, distributors, and retailers. The objective is to signifi- 
cantly reduce costs, increase efficiency, and improve their supply chain cycle times. 
SCM software can also help improve interenterprise coordination among supply chain 
process players. The result is much more effective distribution and channel networks 
among business partners. The Web initiatives of PC Connection illustrate these 
developments. 


PC Connection has razor-thin margins. To stay healthy, the $1.8 billion-a-year tech 
reseller has slashed inefficiencies wherever possible in recent years. Yet despite tight 
financial circumstances, PC Connection invested substantially to overhaul its supply 
chain, building Web services modules in front of its ERP system to more efficiently 
integrate with partners and suppliers. The upgrades will help the company take on 
new business opportunities, such as selling software licenses, that promise higher 
margins than hardware. 

Although the company has grown significantly over the years, the growth hasn’t 
been without pain. While PC Connection now offers goods and services from more 
than 1,400 manufacturers, its core ERP system hadn’t changed much from the days 
when the company sold directly to customers. “It was built for the days of pick, pack, 
and ship,” Jack Ferguson, PC Connection’s treasurer and CFO, says of the compa- 
ny’s Oracle JD Edwards ERP system. That became a growing problem as the com- 
pany over the last several years expanded its catalog and extended its fulfillment 
network to include more than a dozen external partners to handle increasingly com- 
plex drop-ship orders. “We were faced with a growing number of products, and we 
also had a desire to cut inventory,” Ferguson says. 

It soon became apparent that the system wasn’t built to handle such a multitiered 
fulfillment network. “Once you move to drop-ship it gets more complicated,” says 
Ferguson, who notes that even basic requirements, like the calculation of sales tax on 
an order, were affected by the new drop-ship arrangements. Before long, managers 
from various departments within PC Connection were requesting ad hoc changes to 
the company’s ERP system to meet new requirements as they evolved. But the proc- 
ess was becoming unmanageable. As a result, PC Connection last year decided to 
embark on a thorough overhaul of its fulfillment system. 

IT staffers looked at numerous off-the-shelf E-commerce packages, but all were 
found lacking. Instead, the company launched a labor-intensive campaign to inter- 
nally develop new front-end modules for the existing JD Edwards system. These 
modules were built using both Web services and traditional EDI to deal with the 
company’s growing web of fulfillment partners. 

The first set of enhancements to the JD Edwards system went online recently, 
and Ferguson says they’re already paying off in terms of time and cost savings. “In 
the past, much of what our buyers did was very manual and time consuming, with 
lots of order entry across multiple systems,” he says. “This takes 90% of the manual 
part out of their day.” 

Among other things, there are now modules that can automatically determine 
the quickest, most economical way to fulfill an order, whether directly from one of 
the company’s warehouses or through a partner in a particular geographic location. 
Still, Ferguson says PC Connection is investing for future growth, and adds that the 
new system means customer orders will continue to be filled with greater speed and 
accuracy, even as business picks up. 

“Tt’s a customer satisfaction issue,” he says. “To stay in the game you have to 
upgrade your system to handle increased requests.” 


Source: Adapted from Paul McDougall, “PC Connection Learns to Stop, Drop, and Ship,” InformationWeek, 
September 15, 2008. 
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FIGURE 7.13 A typical example of electronic data interchange activities, an important form of business-to-business 
electronic commerce. EDI over the Internet is a major B2B e-commerce application. 
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Electronic data interchange (EDI) was one of the earliest uses of information technol- 
ogy for supply chain management. EDI involves the electronic exchange of business 
transaction documents over the Internet and other networks between supply chain 
trading partners (organizations and their customers and suppliers). Data representing 
a variety of business transaction documents (e.g., purchase orders, invoices, requests 
for quotations, shipping notices) are automatically exchanged between computers us- 
ing standard document message formats. Typically, EDI software is used to convert a 
company’s own document formats into standardized EDI formats specified by various 
industry and international protocols. Thus, EDI is an example of the almost complete 
automation of an e-commerce supply chain process. And EDI over the Internet, using 
secure virtual private networks, is a growing B2B e-commerce application. 

Formatted transaction data are transmitted over network links directly between 
computers without paper documents or human intervention. In addition to direct 
network links between the computers of trading partners, third-party services are 
widely used. Value-added network companies like GE Global Exchange Services and 
Computer Associates offer a variety of EDI services for relatively high fees. But many 
EDI service providers now offer secure, lower cost EDI services over the Internet. 
Figure 7.13 illustrates a typical EDI system. 

EDI is still a popular data-transmission format among major trading partners, 
primarily to automate repetitive transactions, though it is increasingly being replaced 
by XML-based Web services. EDI automatically tracks inventory changes; triggers 
orders, invoices, and other documents related to transactions; and schedules and con- 
firms delivery and payment. By digitally integrating the supply chain, EDI streamlines 
processes, saves time, and increases accuracy. And by using Internet technologies, 
lower-cost Internet-based EDI services are now available to smaller businesses. 


Figure 7.14 helps us understand the role and activities of supply chain management in 
business more clearly. The top three levels of Figure 7.14 show the strategic, tactical, 
and operational objectives and outcomes of SCM planning, which are then accom- 
plished by the business partners in a supply chain at the execution level of SCM. The role 
of information technology in SCM is to support these objectives with interenterprise 
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FIGURE 7.14 The objectives and outcomes of supply chain management are accomplished for a business with the 
help of interenterprise SCM information systems. 
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Source: Adapted from Keith Oliver, Anne Chung, and Nick Samanach, “Beyond Utopia: The Realist’s Guide to Internet-Enabled Supply Chain 
Management,” Strategy and Business, Second Quarter, 2001, p. 99. 


Benefits and 
Challenges 
of SCM 


information systems that produce many of the outcomes a business needs to effec- 
tively manage its supply chain. That’s why many companies today are installing SCM 
software and developing Web-based SCM information systems. 

Until recently, SCM software products typically were developed for either supply 
chain planning or execution applications. SCM planning software from vendors such 
as i2 and Manugistics supports a variety of applications for supply and demand fore- 
casting. SCM execution software from vendors such as EXE ‘Technologies and Man- 
hattan Associates supports applications like order management, logistics management, 
and warehouse management. However, big ERP vendors like Oracle and SAP are now 
offering Web-enabled software suites of e-business applications that include SCM 
modules. Examples include Oracle’s e-Business Suite and SAP AG’s mySAP. 


Creating a real-time SCM infrastructure is a daunting and ongoing issue and quite 
often a point of failure for several reasons. The chief reason is that the planning, selection, 
and implementation of SCM solutions is becoming more complex as the pace of technologi- 
cal change accelerates and the number of a company’s partners increases. 


The promised outcomes that are outlined in Figure 7.15 emphasize the major 
business benefits that are possible with effective supply chain management systems. 
Companies know that SCM systems can provide them with key business benefits such 
as faster, more accurate order processing, reductions in inventory levels, quicker times 
to market, lower transaction and materials costs, and strategic relationships with their 
suppliers. All of these benefits of SCM are aimed at helping a company achieve agility 
and responsiveness in meeting the demands of its customers and the needs of its busi- 
ness partners. 

However, developing effective SCM systems has proven to be a complex and dif- 
ficult application of information technology to business operations. So achieving the 
business value and customer value goals and objectives of supply chain management, 
as illustrated in Figure 7.16, has been a major challenge for most companies. 

What are the causes of problems in supply chain management? Several reasons 
stand out. A lack of proper demand-planning knowledge, tools, and guidelines is a 
major source of SCM failure. Inaccurate or overoptimistic demand forecasts will cause 
major production, inventory, and other business problems, no matter how efficient the 
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FIGURE 7.15 The supply chain management functions and potential benefits offered by the SCM module in the 
mySAP e-business software suite. 


SCM Functions SCM Outcomes 


Planning 


Supply Chain Design Optimize network of suppliers, plants, and distribution centers. 


Collaborative Demand and Develop an accurate forecast of customer demand by sharing demand and supply fore- 
Supply Planning casts instantaneously across multiple tiers. 


Internet-enable collaborative scenarios, such as collaborative planning, forecasting, and 
replenishment (CPFR), and vendor-managed inventory. 


Execution 


Materials Management Share accurate inventory and procurement order information. 
Ensure materials required for production are available in the right place at the right time. 


Reduce raw material spending, procurement costs, safety stocks, and raw material and 
finished goods inventory. 


Collaborative Fulfillment Commit to delivery dates in real time. 


Fulfill orders from all channels on time with order management, transportation plan- 
ning, and vehicle scheduling. 

Support the entire logistics process, including picking, packing, shipping, and delivery in 
foreign countries. 


Supply Chain Event Monitor every stage of the supply chain process, from price quotation to the moment 
Management the customer receives the product, and receive alerts when problems arise. 


Supply Chain Performance Report key measurements in the supply chain, such as filling rates, order cycle times, and 
Management capacity utilization. 


rest of the supply chain management process. Inaccurate production, inventory, and 
other business data provided by a company’s other information systems are a frequent 
cause of SCM problems. And the lack of adequate collaboration among marketing, 
production, and inventory management departments within a company, and with sup- 
pliers, distributors, and others, will sabotage any SCM system. Even the SCM soft- 
ware tools themselves are considered to be immature, incomplete, and hard to 
implement by many companies that are installing SCM systems. 


FIGURE 7.16 
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FIGURE 7.17 
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How does a business interconnect its cross-functional enterprise systems? Enterprise 
application integration (EAI) software is being used by many companies to connect 
their major e-business applications. See Figure 7.17. EAI software enables users to 
model the business processes involved in the interactions that should occur between 
business applications. EAI also provides middleware that performs data conversion and 
coordination, application communication and messaging services, and access to the ap- 
plication interfaces involved. Thus, EAI software can integrate a variety of enterprise 
application clusters by letting them exchange data according to rules derived from the 
business process models developed by users. For example, a typical rule might be: 


When an order is complete, have the order application tell the accounting system to send a 
bill and alert shipping to send out the product. 


Thus, as Figure 7.17 illustrates, EAI software can integrate the front-office and 
back-office applications of a business so that they work together in a seamless, inte- 
grated way. This vital capability provides real business value to a business enterprise 
that must respond quickly and effectively to business events and customer demands. 
For example, the integration of enterprise application clusters has been shown to dra- 
matically improve customer call center responsiveness and effectiveness. That’s be- 
cause EAI integrates access to everything the customer and product data customer 


FIGURE 7.18 An example of a new customer order process showing how EAI middleware connects several 
business information systems within a company. 


Orders & 
Fulfillment 


Manufacturing _ 


> 


EAI: Costly, Painful, 
and Worth It 


D 


Transaction 
Processing 
Systems 


Chapter 7 / e-Business Systems @ 283 


reps need to serve customers quickly. EAI also streamlines sales order processing so 
that products and services can be delivered faster. Thus, EAI improves customer and 
supplier experience with the business because of its responsiveness. See Figure 7.18. 


If you order speakers from Bose, your order goes into a system CIO Robert Ramrath 
calls the Common Order Interface. 

Ramrath’s group knit this custom framework together about three years ago. Two 
legacy call center applications, plus a Web commerce application built mostly with 
Microsoft tools, are all linked to an underlying database and connected to the corpo- 
rate back-office ERP system, so your order winds up in SAP regardless of how it was 
placed. 

That’s the kind of setup for which enterprise application integration (EAI) tools 
were born. EAI software connects applications through a central message-routing 
hub; EAT tools are also equipped to parse and translate data, as well as automatically 
route information according to business processes. 

Make no mistake: EAI systems are expensive. 

‘Top-end EAI covers a lot of turf: a stack of functions from basic messaging up 
through business process management. On top of this central engine, EAI customers 
buy “adapters” to connect to their applications (such as an SAP or Siebel adapter) 
and custom adapters for idiosyncratic legacy applications. There’s more to the total 
cost than just the software. 

EAI projects carry three red flags: consulting costs, maintenance costs, and data 
definition problems that can drive up the first two costs. Those are classic IT project 
expenditures, but they’re worth flagging with EAI because early vendor marketing 
efforts suggested the idea that EAI stuff is off-the-shelf, once-and-done, plug-and- 
play. Not so, say practitioners. 

Detroit-based General Motors is the poster child for EAI because of the sheer 
size of its application portfolio. 

GM standardized on SeeBeyond’s EAI toolset. The vast array of applications in- 
cludes all of GM’s consumer-facing Web activity, a Siebel CRM system, dealer sup- 
port systems, and portal software from iPlanet. GM’s supply chain application 
infrastructure includes connections to Covisint, a custom vehicle order management 
system, planning and logistics applications, and inventory management. Some GM 
units (those in smaller geographical regions) use SAP as their foundation; others 
don’t. There is also an i2 Technologies supply chain management package rollout 
under way. That package will replace older planning applications as part of an ambi- 
tious reengineering of GM’s entire order-to-delivery process. 

Big companies such as General Motors report concrete savings of as much as 
80 percent on certain integration projects once the messaging hub is in place and 
reuse of interfaces starts to kick in. Smaller companies have a tougher decision to 
make, but those with multiple or business-critical integration needs can also experi- 
ence benefits from EAI. EAT is infrastructure, and cost justification is always a tough 
sell for infrastructure projects. Taking a long-term view, however, the only thing 
more expensive is not using these tools. 


Source: Adapted from Derek Slater, “INTEGRATION—Costly, Painful, and Worth It,” CIO Magazine, January 15, 2002. 


Transaction processing systems (TPS) are cross-functional information systems that 
process data resulting from the occurrence of business transactions. We introduced 
transaction processing systems in Chapter 1 as one of the major application categories 
of information systems in business. 

Transactions are events that occur as part of doing business, such as sales, pur- 
chases, deposits, withdrawals, refunds, and payments. Think, for example, of the data 
generated whenever a business sells something to a customer on credit, whether in a 
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retail store or at an e-commerce site on the Web. Data about the customer, product, 
salesperson, store, and so on must be captured and processed. This need prompts ad- 
ditional transactions, such as credit checks, customer billing, inventory changes, and 
increases in accounts receivable balances, which generate even more data. Thus, trans- 
action processing activities are needed to capture and process such data, or the opera- 
tions of a business would grind to a halt. Therefore, transaction processing systems 
play a vital role in supporting the vital operations of most companies today. 

Online transaction processing systems play a strategic role in Web-enabled busi- 
ness processes and electronic commerce. Many firms are using the Internet and other 
networks that tie them electronically to their customers or suppliers for online trans- 
action processing (OLTP). Such real-time systems, which capture and process transac- 
tions immediately, can help firms provide superior service to customers and other 
trading partners. This capability adds value to their products and services and thus 
gives them an important way to differentiate themselves from their competitors. 


Syntellect’s Online Figure 7.19 illustrates an online transaction processing system for cable pay-per-view 
systems developed by Syntellect Interactive Services. Cable TV viewers can select 
j pay-per-view events offered by their cable companies using the phone or the World 
Processing Wide Web. The pay-per-view order is captured by Syntellect’s interactive voice re- 
sponse system or Web server, and then transported to Syntellect database application 
servers. There the order is processed, customer and sales databases are updated, and 
the approved order is relayed back to the cable company’s video server, which trans- 
mits the video of the pay-per-view event to the customer. Thus, Syntellect teams 
with over 700 cable companies to offer a very popular and very profitable service. 


Transaction 


FIGURE 7.19 The Syntellect pay-per-view online transaction processing system. 
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‘Transaction processing systems, such as Syntellect’s, capture and process data describ- 
ing business transactions, update organizational databases, and produce a variety of 
information products. You should understand this as a transaction processing cycle of 
several basic activities, as illustrated in Figure 7.20. 


Data Entry. The first step of the transaction processing cycle is the capture of 
business data. For example, transaction data may be collected by point-of-sale 
terminals using optical scanning of bar codes and credit card readers at a retail 
store or other business. Or transaction data can be captured at an electronic com- 
merce Web site on the Internet. The proper recording and editing of data so they 
are quickly and correctly captured for processing is one of the major design 
challenges of information systems discussed in Chapter 12. 


Transaction Processing. Transaction processing systems process data in two ba- 
sic ways: (1) batch processing, where transaction data are accumulated over a pe- 
riod of time and processed periodically; and (2) real-time processing (also called 
online processing), where data are processed immediately after a transaction oc- 
curs. All online transaction processing systems incorporate real-time processing 
capabilities. Many online systems also depend on the capabilities of fault tolerant 
computer systems that can continue to operate even if parts of the system fail. We 
will discuss this fault tolerant concept in Chapter 11. 


Database Maintenance. An organization’s databases must be maintained by its 
transaction processing systems so that they are always correct and up-to-date. 
Therefore, transaction processing systems update the corporate databases of an 
organization to reflect changes resulting from day-to-day business transactions. 
For example, credit sales made to customers will cause customer account balances 
to be increased and the amount of inventory on hand to be decreased. Database 
maintenance ensures that these and other changes are reflected in the data 
records stored in the company’s databases. 


Document and Report Generation. ‘Transaction processing systems produce a 
variety of documents and reports. Examples of transaction documents include 
purchase orders, paychecks, sales receipts, invoices, and customer statements. 
‘Transaction reports might take the form of a transaction listing such as a payroll 
register or edit reports that describe errors detected during processing. 


286 © Module III / Business Applications 
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e Inquiry Processing. Many transaction processing systems allow you to use the 
Internet, intranets, extranets, and Web browsers or database management query 
languages to make inquiries and receive responses regarding the results of trans- 
action processing activity. Typically, responses are displayed in a variety of pre- 
specified formats or screens. For example, you might check on the status of a 
sales order, the balance in an account, or the amount of stock in inventory and 
receive immediate responses at your PC. 


Really difficult business problems always have many aspects. Often a major decision de- 
pends on an impromptu search for one or two key pieces of auxiliary information and a 
quick ad hoc analysis of several possible scenarios. You need software tools that easily com- 
bine and recombine data from many sources. You need Internet access for all kinds of 
research. Widely scattered people need to be able to collaborate and work the data in 
different ways. 


Enterprise collaboration systems (ECS) are cross-functional information systems 
that enhance communication, coordination, and collaboration among the members of 
business teams and workgroups. Information technology, especially Internet technolo- 
gies, provides tools to help us collaborate—to communicate ideas, share resources, and 
coordinate our work efforts as members of the many formal and informal process and 
project teams and workgroups that make up many of today’s organizations. Thus, the 
goal of ECS is to enable us to work together more easily and effectively by helping us: 


e Communicate. Sharing information with each other. 


e Coordinate. Coordinating our individual work efforts and use of resources with 
each other. 


e Collaborate. Working together cooperatively on joint projects and assignments. 


For example, engineers, business specialists, and external consultants may form a 
virtual team for a project. The team may rely on intranets and extranets to collaborate 
via e-mail, videoconferencing, discussion forums, and a multimedia database of work- 
in-progress information at a project Web site. The enterprise collaboration system 
may use PC workstations networked to a variety of servers on which project, corpo- 
rate, and other databases are stored. In addition, network servers may provide a variety 
of software resources, such as Web browsers, groupware, and application packages, to 
assist the team’s collaboration until the project is completed. 


The capabilities and potential of the Internet as well as intranets and extranets are 
driving the demand for better enterprise collaboration tools in business. However, it is 
Internet technologies like Web browsers and servers, hypermedia documents and da- 
tabases, and intranets and extranets that provide the hardware, software, data, and 
network platforms for many of the groupware tools for enterprise collaboration that 
business users want. Figure 7.21 provides an overview of some of the software tools 
for electronic communication, electronic conferencing, and collaborative work 
management. 

Electronic communication tools include electronic mail, voice mail, faxing, Web 
publishing, bulletin board systems, paging, and Internet phone systems. These tools 
enable you to electronically send messages, documents, and files in data, text, voice, or 
multimedia over computer networks. This capability helps you share everything from 
voice and text messages to copies of project documents and data files with your team 
members, wherever they may be. The ease and efficiency of such communications are 
major contributors to the collaboration process. 

Electronic conferencing tools help people communicate and collaborate while 
working together. A variety of conferencing methods enables the members of teams 
and workgroups at different locations to exchange ideas interactively at the same time 


FIGURE 7.21 
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or at different times at their convenience. These methods include data and voice con- 
ferencing, videoconferencing, chat systems, and discussion forums. Electronic confer- 
encing options also include electronic meeting systems and other group support systems 
where team members can meet at the same time and place in a decision room setting or 
use the Internet to work collaboratively anywhere in the world. See Figure 7.22. 


Source: ©Reproduced with permission of Yahoo! Inc. 


Standard QuickPlace for Teams 

Enables team members to work together over the internet or 
intranet, Supports team discussions, a team calendar, task 
tracking, chat, notification, etc, More info... 


Corporate Team Place 


| Use this PlaceType if you are running an internal task force or 


project team. It is configured with standard company forms, the 
company graphics, and an initial document library, More info... 


Supply Chain Workspace 

If you are one of the managers setting up a supply-chain team, 
choose this PlaceType. It has several custom tools built into it. 
More info... 
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Collaborative work management tools help people accomplish or manage group 
work activities. This category of software includes calendaring and scheduling tools, 
task and project management, workflow systems, and knowledge management tools. 
Other tools for joint work, such as joint document creation, editing, and revision, are 
found in the software suites discussed in Chapter 4. 


For emergency responders working along Interstate 95, accidents aren’t a game; 
they’re a way of life (and death). So it seemed odd to a group of firefighters, cops, 
and medics when researchers from the University of Maryland suggested it use a 
virtual world to collaborate on training for rollovers, multicar pileups, and life- 
threatening injuries. 

The phrase virtual world is often associated with Second Life, the much-hyped 
3-D environment hosted by Linden Lab that allows users to talk to friends, sell 
‘T-shirts, fly around on carpets, and even build amusement parks—in other words, to 
play. “It wasn’t until we started to do elaborate demos that the first responders started 
to realize the true potential,” says Michael Pack, director of research with the Uni- 
versity of Maryland’s Center for Advanced Transportation Technology, who has since 
begun rolling out a virtual world pilot project that could accommodate training for 
hundreds of emergency workers. 

Industry analysts and developers of virtual worlds believe that by immersing us- 
ers in an interactive environment that allows for social interactions, virtual worlds 
have the potential to succeed where other collaborative technologies, like teleconfer- 
encing, have failed. Phone-based meetings begin and end abruptly at the mercy of 
the person or service administering it. In a virtual world, conversations between em- 
ployees can continue within the virtual space—just as they do in company hallways 
after a meeting ends. 

However, businesses must overcome many technical and cultural obstacles before 
they adopt virtual worlds on a major scale. Perhaps even more important than the 
technical challenges, companies must tackle the issue of workers’ online identities. 
People’s 3-D representations, known as avatars, must be constructed in such a way that 
allows users of virtual worlds to have faith that they’re talking to the right colleague. 
Security challenges abound; most companies using virtual worlds today do so on a 
public or externally hosted platform with limited options to protect corporate data. 

Pack says training in a virtual world presents a desirable alternative to real-life 
exercises, which can be pricey and inefficient. “You’d go out in a field and flip a car 
over and have people act as victims,” he says. Trainers couldn’t introduce many vari- 
ables (such as mounting traffic). “It’s supposed to be as human as possible, so any- 
thing goes,” he says. “We’ve put together lots of scenarios, from fender benders to 
20-car pileups. We put [the participants] in dangerous situations to see how they will 
respond.” In virtual worlds, Pack and his team can program multiple scenarios into 
the software. For example, if a first responder gets out of his car and fails to put on a 
reflective jacket, the system might respond with a car hitting that person’s avatar. 

“You want people to be so comfortable in the virtual world that they’re not con- 
centrating on how to use them,” Pack says. “They can’t be worried about how to 
turn left or talk to someone. They need to be worried about how to do their jobs, just 
like they would in the real world.” 


Source: Adapted from C.G. Lynch. “Companies Explore Virtual Worlds as Collaboration Tools,” CIO Magazine, 
February 6, 2008. 
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Functional Business Systems 


Business managers are moving from a tradition where they could avoid, delegate, or ig- 
nore decisions about IT to one where they cannot create a marketing, product, interna- 
tional, organization, or financial plan that does not involve such decisions. 


There are as many ways to use information technology in business as there are 
business activities to be performed, business problems to be solved, and business op- 
portunities to be pursued. As a business professional, you should have a basic under- 
standing and appreciation of the major ways information systems are used to support 
each of the functions of business that must be accomplished in any company that 
wants to succeed. Thus, in this section, we discuss functional business systems, that is, 
a variety of types of information systems (transaction processing, management infor- 
mation, decision support, etc.) that support the business functions of accounting, 
finance, marketing, operations management, and human resource management. 

Read the Real World Case below. We can learn a lot about the impact of IT on the 
HR function from this case. See Figure 7.23. 


It is also important that you, as a business professional, have a specific understanding 
of how information systems affect a particular business function (e.g., marketing) or a 
particular industry (e.g., banking) that is directly related to your career objectives. For 
example, someone whose career objective is a marketing position in banking should 
have a basic understanding of how information systems are used in banking and how 
they support the marketing activities of banks and other firms. 

Figure 7.24 illustrates how information systems can be grouped into business func- 
tion categories. Thus, information systems in this section will be analyzed according 
to the business function they support by looking at a few key examples in each func- 
tional area. This approach should give you an appreciation of the variety of functional 
business systems that both small and large business firms may use. 


The business function of marketing is concerned with the pricing, promotion, and sale 
of existing products in existing markets, as well as the development of new products 
and new markets to better attract and serve present and potential customers. Thus, 
marketing performs a vital function in the operation of a business enterprise. Business 
firms have increasingly turned to information technology to help them perform vital 
marketing functions in the face of the rapid changes of today’s environment. 

Figure 7.25 illustrates how marketing information systems provide information 
technologies that support major components of the marketing function. For example, 
Internet/intranet Web sites and services make an interactive marketing process possi- 
ble, in which customers can become partners in creating, marketing, purchasing, and 
improving products and services. Sales force automation systems use mobile computing 
and Internet technologies to automate many information-processing activities for 
sales support and management. Other marketing information systems assist marketing 
managers in customer relationship management, product planning, pricing and other 
product management decisions, advertising, sales promotion, targeted marketing 
strategies, and market research and forecasting. Let’s take a closer look at three of 
these marketing applications. 


The term interactive marketing has been coined to describe a customer-focused mar- 
keting process that is based on using the Internet, intranets, and extranets to establish 
two-way transactions between a business and its customers or potential customers. 
The goal of interactive marketing is to enable a company to use those networks 
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REAL WORLD 


CASE 


ur people are our most valuable asset.” How many 

times have you heard that company slogan? In re- 

cent years, HR departments have focused their 
technology efforts on driving down costs by automating or 
outsourcing nonstrategic, transaction-oriented processes such 
as benefits enrollment and payroll. As a result, many employ- 
ees can now do a number of things online that used to require 
the intervention of HR staff, such as viewing pay stubs, chang- 
ing personal information, or enrolling for benefits. 

Increasingly, however, HR is being urged not only to re- 
duce the cost of hiring, retaining, and compensating em- 
ployees but also to optimize the corporate talent pool. After 
all, if your workforce is your biggest expense, shouldn’t you 
shape it to support in the best way possible the strategic 
goals of the business? 

Imagine placing an electronic order to hire an employee 
the same way a factory manager uses ERP software to order 
more parts for the assembly line. ‘That’s roughly what’s hap- 
pening at Oregon Health & Science University (OHSU). 
“More and more, HR is being called upon to be a strategic 
partner,” says Joe Tonn, manager of HR management systems 
at OHSU in Portland. 

The payoff is significant: The university is filling job 
openings two weeks faster than it once did and saving at least 
$1,500 per job now that it’s using Oracle Corp.’s iRecruit- 
ment software. The iRecruitment application, part of Ora- 
cle’s E-Business Human Resources Management System 
(HRMS) suite, enables managers to request a new employee 
and process applications electronically. The software handles 
most of the time-consuming administrative work, including 
routing requisition forms to the appropriate managers and 
posting the job on the We b site. “We wanted to be able to 


FIGURE 7.23 


More and more HR is being called to be a strategic 


= business partner, and professionals in this area are 


turning to IT for innovative solutions. 


©Jack Hollingsworth/Corbis 


OHSU, Sony, Novartis, and Others: 
Strategic Information Systems—It’s 
HR’s Turn 


open a job requisition in the morning and have qualified 
candidates in the afternoon,” says Tonn. 

In fact, OHSU now has access to applicants only min- 
utes after a job opening is posted to the university’s Web site, 
and it fills those jobs in just four weeks instead of six or more. 
The university also recently added Oracle’s Manager Self- 
Service module for logging changes to employee status (e.g., 
promotions or use of family leave) and uses the Oracle Em- 
ployee Self-Service application for benefits management. 

‘Tonn expects to add software for performance reviews, 
succession planning, and learning management over the next 
couple of years. 

Large and midsize organizations such as OHSU are increas- 
ingly turning to these new types of employee management 
applications—commonly called human capital management 
(HCM) or workforce optimization software—to automate HR 
processes that used to be done manually, on paper, or by e-mail. 

“Human capital management covers the whole discipline 
of managing the workforce, bringing them in and tracking 
them over time,” says Christa Manning, an analyst at AMR 
Research Inc. in Boston. AMR forecasts a 10 percent com- 
pound annual growth rate through 2010 for the $6 billion 
HCM market. Much of the market growth can be attributed 
to the upcoming retirement of baby boomers, which will 
shrink the pool of available workers. Companies need to auto- 
mate their systems so that they can better identify employees 
they want to retain and then provide a career path for them. 

Sony Computer Entertainment America Inc. uses recruit- 
ment software from WorkforceLogic to automate its process 
for hiring contract workers. Sally Buchanan, director of hu- 
man resources, says the software is particularly useful for en- 
suring that hiring managers understand and comply with the 
legal distinctions between contract and salaried employees. 

“When they requisition a contractor, they must answer a 
series of questions through the WorkforceLogic interface, 
and the application renders a recommendation on whether 
the position is best filled by a contractor or by someone on 
the payroll,” says Buchanan. 

Employee performance management, career develop- 
ment, and succession planning are all functions that can be 
automated with HCM applications. For example, Tyco In- 
ternational Ltd. uses Kenexa’s Career Tracker to track em- 
ployee performance and promotions. The software, which is 
configured with Tyco’s performance standards and rating 
system, can plot employee performance on a graph to iden- 
tify the top performers, both in terms of job achievement 
and in meeting Tyco’s leadership behavior standards. 

Using the database of employee credentials and exper- 
tise, Tyco can also locate the best people to fill key job open- 
ings and analyze what types of training they’ll need. “We can 
identify who we have and how they fit,” says Shaun Zitting, 
director of organizational development at the Princeton, 
New Jersey-based company. 

According to AMR’s Manning, most corporate executives 
like having a tool that helps them evaluate and promote people 
on purely objective criteria. “They know it’s not based on, ‘I 
like Joe because we go to lunch every day.’ It brings some real 


science to the process and allows you to not only identify your 
top performers but also to know why they’re top performers,” 
she says. Career development and succession planning applica- 
tions have also become more important as baby boomers retire 
and organizations have to find qualified replacements. 

Succession planning isn’t just for CEOs and other top 
executives anymore. “It’s starting to cascade down into the 
organization as the collecting and associating of employee 
information become easier,” says Manning. 

Managers can associate key characteristics with specific 
jobs and analyze the traits of successful employees. Employ- 
ees themselves can use the data to see their most likely career 
paths in an organization. Compensation management, an- 
other function often found in HCM tools, enables organiza- 
tions to create incentive programs, tie compensation to 
performance goals, and analyze pay packages and trends. 

Scheduling work shifts for 27,000 health care professionals 
ina wide range of specialties and at multiple locations is a formi- 
dable task. At Banner Health, a large hospital system based in 
Phoenix, however, the implementation of the Kronos schedul- 
ing application has automated much of the process. Banner uses 
the Kronos application to log hours worked and to plan sched- 
ules, says Kathy Schultz, director of IT at Banner Health. 

Integrating data about hours worked with future sched- 
uling helps to ensure that employees aren’t expected to work 
if they’ve just put in a lot of overtime. “What hours you work 
isn’t always what you were scheduled to work,” notes Schultz. 
“Having scheduling integrated with live time-and-attendance 
information is extremely critical.” 

At pharmaceutical giant Novartis AG, sales and research 
and development professionals are expected to take various 
classes to keep them up to date on the latest products and 
trends. With about 550 Web-based and classroom-based 
courses available, the old paper- and Excel-based process for 
administering training had become cumbersome and time- 
consuming. Yet by using Saba Software Inc.’s Learning Suite, 
administrative work has been reduced by 50 percent, accord- 
ing to John Talanca, head of learning technologies at No- 
vartis. “It’s allowed the administrators to be more efficient 
and take on other work. In the past, they would spend hours 
and hours each day managing this,” says ‘Talanca. 


CASE STUDY QUESTIONS 


1. What are some of the business benefits of the technolo- 
gies described in the case? Provide several examples be- 
yond the mere automation of transaction-oriented 
processes. 


2. Do you think the business value of these strategic HRM 
applications depends on the type of business a company 
is in, for instance, consulting, manufacturing, or profes- 
sional services? Why or why not? Explain. 


3. What are some of the challenges and obstacles in devel- 
oping and implementing HRM systems? Are these 
unique to this type of system? What strategies would 
you recommend for companies to meet those chal- 
lenges? Provide several specific recommendations. 
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HR applications often contain a variety of employee data, 
including salaries, experience, education, performance reviews, 
and benefits selections. Analysis tools can enable HR managers 
to leverage those data for strategic decision making. They can, 
for instance, track employee performance against company 
benchmarks, forecast the skills that will be needed for future 
projects, analyze salary increases by geographic region or pro- 
fessional field, or predict trends in benefits selection and costs. 

For example, OHSU’s Tonn hopes eventually to use anal- 
ysis tools to evaluate recruiting practices more efficiently. 

Honing the school’s recruiting campaigns could produce 
better candidates as well as lower costs. “We can see how 
many applications a particular source gives us, and whether 
we ever hire applicants from that source. If we do hire them, 
do they become successful employees? Running an ad in The 
Oregonian might produce a thousand applications. But if we 
didn’t hire any of them, then that was a whole lot of admin- 
istrative work that didn’t bear any fruit.” 

Organizations such as Tyco are increasingly viewing em- 
ployees as assets, to be acquired, cultivated, and deployed 
strategically—not unlike product inventory or IT systems. The 
very name of the software category, human capital management, 
conveys the notion that a worker is an investment that should be 
optimized. “Managers want to see how the people they hired are 
doing,” says Manning. “It’s taking the organization’s people 
assets and leveraging them to reach business goals, such as 
increased sales, profitability, and customer satisfaction.” 

Individually, the various HCM tools are helpful, but to 
get optimal value, they need to be integrated, with the data 
stored in a common repository. Organizational issues may be 
in the way, such as if the various HCM functions are split 
between different corporate departments, or if the HCM 
suite has to be implemented across multiple business units 
running disparate ERP and HR applications. 

Changing your HR system from transactional to strate- 
gic can take three to five years, but the important thing is to 
get started. As we move from an industrial to a knowledge 
economy, it’s not what you manufacture but what your peo- 
ple know that gives you competitive advantage. 


Source: Adapted from Sue Hildreth, “HR Gets a Dose of Science,” Computer- 
world, February 5, 2007; and Mary Brandel, “HR Gets Strategic,” Computer- 
world, January 24, 2005. 


REAL WORLD ACTIVITIES 


1. The case refers to a view of employees as “assets, to be 
acquired, cultivated, and deployed strategically—not 
unlike product inventory or IT systems.” It also men- 
tions these systems allow managers to evaluate and 
promote people on objective criteria. Do you believe 
extensive adoption of these technologies may lead to a 
depersonalization of the employment relationship? 
Why or why not? Break into small groups to discuss 
these issues and then summarize your ideas. 


2. What are some of the HR trends that seem to be oper- 
ating behind this renewed emphasis on strategic appli- 
cations of technology to this functional area? What 
new developments have recently arisen in this domain? 

Search the Internet for innovative applications of IT in 

HRM and write a report to summarize your findings. 
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FIGURE 7.24 Examples of functional information systems. Note how they support the major functional areas of business. 
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profitably to attract and keep customers who will become partners with the business 
in creating, purchasing, and improving products and services. 

In interactive marketing, customers are not just passive participants who receive me- 
dia advertising prior to purchase but are actively engaged in network-enabled proactive 
and interactive processes. Interactive marketing encourages customers to become in- 
volved in product development, delivery, and service issues. This involvement is enabled 
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ommunity 


by various Internet technologies, including chat and discussion groups, Web forms and 
questionnaires, instant messaging, and e-mail correspondence. Finally, the expected out- 
comes of interactive marketing are a rich mixture of vital marketing data, new product 
ideas, volume sales, and strong customer relationships. 


Targeted marketing has become an important tool in developing advertising and pro- 
motion strategies to strengthen a company’s e-commerce initiatives, as well as its tradi- 
tional business venues. As illustrated in Figure 7.26, targeted marketing is an advertising 
and promotion management concept that includes five targeting components. 


e Community. Companies can customize their Web advertising messages and pro- 
motion methods to appeal to people in specific communities. They can be com- 
munities of interest, such as virtual communities of online sporting enthusiasts or 
arts and crafts hobbyists, or geographic communities formed by the Web sites of 
a city or other local organization. 


e Content. Advertising such as electronic billboards or banners can be placed on a 
variety of selected Web sites, in addition to a company’s Web site. The content of 
these messages is aimed at the targeted audience. An ad for a product campaign 
on the opening page of an Internet search engine is a typical example. 


e Context. Advertising appears only in Web pages that are relevant to the content 
of a product or service. So advertising is targeted only at people who are already 
looking for information about a subject (e.g., vacation travel) that is related to a 
company’s products (e.g., car rental services). 


e Demographic/Psychographic. Web marketing efforts can be aimed at specific 
types or classes of people—unmarried, twenty-something, middle income, male 
college graduates, for example. 


e Online Behavior. Advertising and promotion efforts can be tailored to each visit 
to a site by an individual. This strategy is based on a variety of tracking tech- 
niques, such as Web “cookie” files recorded on the visitor’s disk drive from previ- 
ous visits. This technique enables a company to track a person’s online behavior 
at a Web site so that it can target marketing efforts (e.g., coupons redeemable at 
retail stores or e-commerce Web sites) to that individual during each visit to its 
Web site. 


An interesting and effective marriage between e-business and target marketing is 
the emergence of the digital billboard. It is estimated that approximately 450,000 
billboard faces exist in the United States. While only a tiny fraction of them are dig- 
ital, the new billboards are making a huge impact on markets all over the country. 

The concept behind the digital billboard is elegantly simple. A billboard is con- 
structed using hundreds of thousands of small LEDs which are controlled via a com- 
puter interface that can be accessed via the Web. Advertisers can change their messages 
quickly, including multiple times in one day. For example, a restaurant can feature 
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Sales Force 
Automation 


FIGURE 7.27 

This Web-based sales 
force automation package 
supports sales lead 
management of qualified 
prospects and the 
management of current 
customer accounts. 


breakfast specials in the morning and dinner specials in the evening. A realtor can 
feature individual houses for sale and change the creative content when the house 
sells. Print and broadcast news media use digital billboards to deliver headlines, 
weather updates, and programming information. WCPO-TYV credits their meteoric 
rise in the ratings to the use of digital billboards to deliver breaking news and updates 
to the nightly newscast. The television station went from the bottom of the ratings in 
2002 to the third largest ABC affiliate in the nation. When the I-35 bridge collapse 
occurred in Minneapolis in 2007, a dangerous situation for unsuspecting drivers ex- 
isted. Within minutes, a digital billboard network in the area had switched from show- 
ing advertising copy to informing drivers about the collapse. Later that evening, the 
digital billboards advised motorists to take alternate routes. Target marketing is in the 
digital arena, with a new way of doing something old. 


Increasingly, computers and the Internet are providing the basis for sales force auto- 
mation. In many companies, the sales force is being outfitted with notebook com- 
puters, Web browsers, and sales contact management software that connect them to 
marketing Web sites on the Internet, extranets, and their company intranets. This 
connectivity not only increases the personal productivity of salespeople but dra- 
matically speeds up the capture and analysis of sales data from the field to marketing 
managers at company headquarters. In return, it allows marketing and sales man- 
agement to improve the delivery of information and the support they provide to 
their salespeople. Therefore, many companies are viewing sales force automation as 
a way to gain a strategic advantage in sales productivity and marketing responsive- 
ness. See Figure 7.27. 

For example, salespeople use their PCs to record sales data as they make their calls 
on customers and prospects during the day. Then each night, sales reps in the field can 
connect their computers by modem and telephone links to the Internet and extranets, 
which can access intranet or other network servers at their company. They can upload 
information about sales orders, sales calls, and other sales statistics, as well as send 
electronic mail messages and access Web site sales support information. In return, the 
network servers may download product availability data, lists of information about 
good sales prospects, and e-mail messages. 
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Baker Tanks, a nationwide leader in rentals of industrial containment and transfer 
equipment, serves customers throughout the country in industries ranging from con- 
struction to aerospace. Because of this varied client base, it’s especially important— 
and challenging—for salespeople to be aware of the specifics of each account every 
time they speak to customers. The company’s 50 sales professionals are on the road 
four days a week visiting customers on location. That creates additional challenges 
when it comes to keeping track of customer information and accessing it when 
needed. 

In the past, salespeople filled out paper forms to track customer information, which 
was later entered into an electronic database. This process left the reps with less time 
to do what they do best—selling. Even worse, the traveling representatives had no way 
of connecting to the electronic database from the customer’s location. They were col- 
lecting plenty of information, but they couldn’t access and use it effectively. 

“They were recording everything on paper, and that’s a very unproductive way of 
getting things done,” says Scott Whitford, systems administrator and lead on the 
wireless Salesforce.com solution. “We were looking for a solution that would im- 
prove our communications, not only between corporate and field people, but be- 
tween field people and our customers.” Adds Darrell Yoshinaga, marketing manager 
at Baker ‘Tanks, “We were looking for a tool we could implement quickly, but that 
would still give us the flexibility we needed to become more efficient.” 

Baker Tanks was immediately drawn to the Web-based functionality, quick im- 
plementation time, and low capital investment of a sales force automation system. 
The ability to connect to sales information anywhere at any time was also an attrac- 
tive feature. So Baker Tanks moved from a paper-based system to a Web-based sys- 
tem, eliminating the extra step of transferring information from paper documents to 
the database. Next, sales reps were outfitted with personal digital assistants (PDAs) 
enabled with the Salesforce.com service. “Our salespeople are real road warriors, and 
we needed to extend the system to them rather than make them come to the system,” 
Whitford reflects. 

Each PDA is equipped with a wireless modem that allows the salesperson to con- 
nect to Salesforce.com for customer contact information, as well as sales history and 
anecdotal notes on the customer—all with read and write access. Salespeople can 
also use the PDAs to e-mail responses to customers more promptly and improve 
time management by integrating appointment scheduling and calendar viewing. Says 
Yoshinaga: “We have achieved our main objective of communicating better with our 
customers. And our salespeople have become more productive because they have 
instant access to information and electronic reporting capabilities.” 


Source: Adapted from “Baker Tanks Leverages Salesforce.com’s Wireless Access to Extend Range of Customer Service,” 
salesforce.com, 2002. 


Manufacturing information systems support the production/operations function that in- 
cludes all activities associated with the planning and control of the processes that pro- 
duce goods or services. Thus, the production/operations function is concerned with 
the management of the operational processes and systems of all business firms. Infor- 
mation systems used for operations management and transaction processing support 
all firms that must plan, monitor, and control inventories, purchases, and the flow of 
goods and services. Therefore, firms such as transportation companies, wholesalers, 
retailers, financial institutions, and service companies must use production/operations 
information systems to plan and control their operations. In this section, we will con- 
centrate on computer-based manufacturing applications to illustrate information sys- 
tems that support the production/operations function. 
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systems support computer- 
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Note that manufacturing 
resources planning systems 
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clusters in an ERP system. 


Once upon a time, manufacturers operated on a simple build-to-stock model. They built 
100 or 100,000 of an item and sold them via distribution networks. They kept track of 
the stock of inventory and made more of the item once inventory levels dipped below a 
threshold. Rush jobs were both rare and expensive, and configuration options limited. 
Things have changed. Concepts like just-in-time inventory, build-to-order (BTO) manu- 
facturing, end-to-end supply chain visibility, the explosion in contract manufacturing, 
and the development of Web-based e-business tools for collaborative manufacturing have 
revolutionized plant management. 


Various manufacturing information systems, many of them Web enabled, are used 
to support computer-integrated manufacturing (CIM). See Figure 7.28. CIM is an 
overall concept that stresses that the objectives of computer-based systems in manu- 
facturing must be to: 


e Simplify (reengineer) production processes, product designs, and factory organi- 
zation as a vital foundation to automation and integration. 


e Automate production processes and the business functions that support them 
with computers, machines, and robots. 


e Integrate all production and support processes using computer networks, cross- 
functional business software, and other information technologies. 


The overall goal of CIM and other such manufacturing information systems is to 
create flexible, agile, manufacturing processes that efficiently produce products of the 
highest quality. Thus, CIM supports the concepts of flexible manufacturing systems, ag- 
ile manufacturing, and total quality management. Implementing such manufacturing 
concepts enables a company to respond quickly to and fulfill customer requirements 
with high-quality products and services. 

Manufacturing information systems help companies simplify, automate, and inte- 
grate many of the activities needed to produce products of all kinds. For example, com- 
puters are used to help engineers design better products using both computer-aided 
engineering (CAE) and computer-aided design (CAD) systems and achieve better produc- 
tion processes with computer-aided process planning. They are also used to help plan the 
types of material needed in the production process, which is called material requirements 
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planning (MRP), and to integrate MRP with production scheduling and shop floor op- 
erations, which is known as manufacturing resource planning. Many of the processes 
within manufacturing resource planning systems are included in the manufacturing 
modules of enterprise resource planning (ERP) software, as discussed in the first sec- 
tion of this chapter. 

Computer-aided manufacturing (CAM) systems are those that automate the pro- 
duction process. For example, this automation could be accomplished by monitoring 
and controlling the production process in a factory (manufacturing execution systems) 
or by directly controlling a physical process (process control), a machine tool (ma- 
chine control), or machines with some humanlike work capabilities (robots). 

Manufacturing execution systems (MES) are performance-monitoring information 
systems for factory floor operations. They monitor, track, and control the five essen- 
tial components involved in a production process: materials, equipment, personnel, 
instructions and specifications, and production facilities. MES includes shop floor 
scheduling and control, machine control, robotics control, and process control sys- 
tems. These manufacturing systems monitor, report, and adjust the status and per- 
formance of production components to help a company achieve a flexible, high-quality 
manufacturing process. 

Process control is the use of computers to control an ongoing physical process. 
Process control computers control physical processes in petroleum refineries, cement 
plants, steel mills, chemical plants, food product manufacturing plants, pulp and paper 
mills, electric power plants, and so on. A process control computer system requires the 
use of special sensing devices that measure physical phenomena such as temperature 
or pressure changes. These continuous physical measurements are converted to digital 
form by analog-to-digital converters and relayed to computers for processing. 

Machine control is the use of computers to control the actions of machines, also 
popularly called numerical control. The computer-based control of machine tools to 
manufacture products of all kinds is a typical numerical control application used by 
many factories throughout the world. 


The human resource management (HRM) function involves the recruitment, place- 
ment, evaluation, compensation, and development of the employees of an organiza- 
tion. The goal of human resource management is the effective and efficient use of the 
human resources of a company. Thus, human resource information systems are de- 
signed to support (1) planning to meet the personnel needs of the business, (2) devel- 
opment of employees to their full potential, and (3) control of all personnel policies 
and programs. Originally, businesses used computer-based information systems to 
(1) produce paychecks and payroll reports, (2) maintain personnel records, and (3) ana- 
lyze the use of personnel in business operations. Many firms have gone beyond these 
traditional personnel management functions and developed human resource information 
systems (HRIS) that also support (1) recruitment, selection, and hiring; (2) job place- 
ment; (3) performance appraisals; (4) employee benefits analysis; (5) training and 
development; and (6) health, safety, and security. See Figure 7.29. 


The Internet has become a major force for change in human resource management. 
For example, online HRM systems may involve recruiting employees through recruit- 
ment sections of corporate Web sites. Companies are also using commercial recruiting 
services and databases on the World Wide Web, posting messages in selected Internet 
newsgroups, and communicating with job applicants via e-mail. 

The Internet has a wealth of information and contacts for both employers and job 
hunters. Top Web sites for job hunters and employers on the World Wide Web in- 
clude Monster.com, HotJobs.com, and CareerBuilder.com. These Web sites are full of 
reports, statistics, and other useful HRM information, such as job reports by industry 
or listings of the top recruiting markets by industry and profession. 
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FIGURE 7.29 Human resource information systems support the strategic, tactical, and operational 
use of the human resources of an organization. 
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HRM and Corporate Intranet technologies allow companies to process most common HRM applications 

Intranets over their corporate intranets. Intranets allow the HRM department to provide 
around-the-clock services to their customers: the employees. They can also dissemi- 
nate valuable information faster than through previous company channels. Intranets 
can collect information online from employees for input to their HRM files, and they 
can enable managers and other employees to perform HRM tasks with little interven- 
tion by the HRM department. See Figure 7.30. 


FIGURE 7.30 
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For example, employee self-service (ESS) intranet applications allow employees to 
view benefits, enter travel and expense reports, verify employment and salary informa- 
tion, access and update their personal information, and enter data that has a time con- 
straint. Through this completely electronic process, employees can use their Web 
browsers to look up individual payroll and benefits information online, right from their 
desktop PCs, mobile computers, or intranet kiosks located around a worksite. 

Another benefit of the intranet is that it can serve as a superior training tool. Employees 
can easily download instructions and processes to get the information or education 
they need. In addition, employees using new technology can view training videos over the 
intranet on demand. Thus, the intranet eliminates the need to loan out and track training 
videos. Employees can also use their corporate intranets to produce automated paysheets, 
the online alternative to time cards. These electronic forms have made viewing, entering, 
and adjusting payroll information easy for both employees and HRM professionals. 


Tt seems like a straightforward and simple question that your typical HR application 
and corporate ERP system should be able to answer: How many employees are 
working for our company today? 

At Chiquita Brands, the Fortune 500 company best known for its blue-stickered 
bananas, “We couldn’t answer that question,” recalls Manjit Singh, Chiquita’s CIO 
since September 2006. “It would take us a couple of weeks to get the answer pulled 
together and by that time, of course, it was all incorrect.” 

Chiquita boasts a global workforce of 23,000 employees in 70 countries on six 
continents, though most of the workers are predominantly in Central America. Up 
until 2008, the Cincinnati-based food manufacturer had employed a hodgepodge of 
legacy HR systems that were inadequate at managing the complex demands of its 
decentralized workforce. Manual, inefficient workarounds (Excel spreadsheets and 
paper-based processes) were frequently used. 

When Chiquita hired a new employee, for instance, the HR paper-trail process 
could contain 20 to 30 steps, Singh notes. 

“At any point, if that paper gets lost, things are going to fall through the cracks,” 
he says. “Many times new employees have shown up and haven’t had an office, a PC 
or a phone. Obviously that causes pain to the employee, it doesn’t make the em- 
ployer look good, and you've lost productivity from the moment the employee walks 
through the door.” 

In October 2008, Chiquita went live on Workday HCM with 5,000 U.S.-based 
employees and 500 managers across 42 countries. Singh took advantage of customi- 
zation options Workday offered when necessary. But he and his team tried to mini- 
mize customization as much as possible, so that they could shorten implementation 
time lines as they continue phased rollouts to 18,000 Latin America—based employ- 
ees and nearly 3,000 employees throughout Europe. 

‘Today, Chiquita’s North American operations enjoy the fruits of the new system, 
including core HR functions such as employee hiring, job changes, compensation track- 
ing and more. “We can see exactly where in the process the employee is, or how the 
hiring is going, who is holding it up and why it’s being held up, so that we can guarantee 
when an employee walks through the door, they have an office, a phone, a PC, and 
they’ve been given access to all of the systems they need to have access to,” says Singh. 

“That’s big, when you talk about the number of employees we hire in a given 
month,” Singh continues. “That drops dollars back down to the bottom line.” 

Lastly, the new HR system has freed up many of Chiquita’s 200 IT staffers to 
focus on higher-value projects. “I want my folks sitting arm and arm with business folks, 
talking about process transformation and trying to figure out how to bring products to 
market even quicker,” Singh says, “not keeping the lights on running a system.” 


Source: Adapted from Thomas Wailgum, “Why Chiquita Said ‘No’ to Tier 1 ERP Providers and ‘Yes’ to SaaS Apps 
from Upstart Workday,” CIO Magazine, April 7, 2009. 
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Accountin g Accounting information systems are the oldest and most widely used information sys- 

tems in business. Computer-based accounting systems record and report the flow of 

Systems funds through izati historical basis and produce i financial 

gh an organization on a historical basis and produce important financia 

statements such as balance sheets and income statements. Such systems also produce 

forecasts of future conditions, including projected financial statements and financial 

budgets. A firm’s financial performance is measured against such forecasts by other 
analytical accounting reports. 

Operational accounting systems emphasize legal and historical record keeping 
and the production of accurate financial statements. Typically, these systems in- 
clude transaction processing systems such as order processing, inventory control, 
accounts receivable, accounts payable, payroll, and general ledger systems. Man- 
agement accounting systems focus on the planning and control of business opera- 
tions. They emphasize cost accounting reports, the development of financial 
budgets and projected financial statements, and analytical reports comparing actual 
to forecasted performance. 

Figure 7.31 illustrates the interrelationships of several important accounting infor- 
mation systems commonly computerized by both large and small businesses. Many 
accounting software packages are available for these applications. Figure 7.32 sum- 
marizes the essential purpose of six common, but important, accounting information 
systems used by both large and small business firms. 


Online Accounting It should come as no surprise that the accounting information systems illustrated in 
Systems Figures 7.31 and 7.32 are being transformed by Internet technologies. Using the In- 
ternet and other networks changes how accounting information systems monitor and 
track business activity. The online, interactive nature of such networks calls for new 
forms of transaction documents, procedures, and controls. This demand particularly 


FIGURE 7.31 Important accounting information systems for transaction processing and financial reporting. 
Note how they are related to each other in terms of input and output flows. 
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FIGURE 7.32 A summary of six essential accounting information systems used in business. 


Common Business Accounting Systems 


© Order Processing 
Captures and processes customer orders and produces data for inventory control and accounts receivable. 
e Inventory Control 
Processes data reflecting changes in inventory and provides shipping and reorder information. 
e Accounts Receivable 
Records amounts owed by customers and produces customer invoices, monthly customer statements, and credit 
management reports. 
e Accounts Payable 
Records purchases from, amounts owed to, and payments to suppliers, and produces cash management reports. 
e Payroll 
Records employee work and compensation data and produces paychecks and other payroll documents and reports. 
© General Ledger 
Consolidates data from other accounting systems and produces the periodic financial statements and reports of the 
business. 
applies to systems like order processing, inventory control, accounts receivable, and 
accounts payable. As outlined in Figure 7.32, these systems are directly involved in the 
processing of transactions between a business and its customers and suppliers. So nat- 
urally, many companies are using Internet and other network links to these trading 
partners for such online transaction processing systems, as discussed in Section I. Fig- 
ure 7.33 is an example of an online accounting report. 
FIGURE 7.33 


An example of an online 
accounting report. 
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FIGURE 7.34 


Examples of important 
financial management 
systems. 


Financial 
Management 
Systems 


Investment Capital Financial 
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m Forecast and m Manage m Evaluate m Forecast financial 
manage cash short-term risk/return performance and 
position. and other of capital financing needs. 

securities. expenditures. 


Computer-based financial management systems support business managers and pro- 
fessionals in decisions regarding (1) the financing of a business and (2) the allocation 
and control of financial resources within a business. Major financial management sys- 
tem categories include cash and investment management, capital budgeting, financial 
forecasting, and financial planning. See Figure 7.34. 

For example, the capital budgeting process involves evaluating the profitability 
and financial impact of proposed capital expenditures. Long-term expenditure pro- 
posals for facilities and equipment can be analyzed using a variety of return on invest- 
ment (ROI) evaluation techniques. This application makes heavy use of spreadsheet 
models that incorporate present value analysis of expected cash flows and probability 
analysis of risk to determine the optimum mix of capital projects for a business. 

Financial analysts also typically use electronic spreadsheets and other financial 
planning software to evaluate the present and projected financial performance of a 
business. They also help determine the financing needs of a business and analyze al- 
ternative methods of financing. Financial analysts use financial forecasts of the eco- 
nomic situation, business operations, types of financing available, interest rates, and 
stock and bond prices to develop an optimal financing plan for the business. Elec- 
tronic spreadsheet packages, DSS software, and Web-based groupware can be used to 
build and manipulate financial models. Answers to what-if and goal-seeking questions 
can be explored as financial analysts and managers evaluate their financing and invest- 
ment alternatives. We will discuss such applications further in Chapter 9. 


Cross-Functional Enterprise Systems. Major 
e-business applications and their interrelationships are 
summarized in the enterprise application architecture of 
Figure 7.3. These applications include integrated cross- 
functional enterprise systems such as enterprise resource 
planning (ERP), customer relationship management 
(CRM), and supply chain management (SCM). These ap- 
plications may be interconnected by enterprise application 
integration (EAT) systems so that business professionals 
can more easily access the information resources they 
need to support the demands of customers, suppliers, and 
business partners. Enterprise collaboration systems (ECS) 
are cross-functional systems that support and enhance 
communication and collaboration among the teams and 


workgroups in an organization. Refer to Figures 7.17 and 
7.20 for summary views of the business applications in 
EAI systems and enterprise collaboration systems. 


Transaction Processing Systems. Online transaction 
processing systems play a vital role in business. Transac- 
tion processing involves the basic activities of (1) data 
entry, (2) transaction processing, (3) database mainte- 
nance, (4) document and report generation, and 

(5) inquiry processing. Many firms are using the Inter- 
net, intranets, extranets, and other networks for online 
transaction processing to provide superior service to 
their customers and suppliers. Figure 7.20 illustrates 
the basic activities of transaction processing systems. 


Customer Relationship Management: The Busi- 
ness Focus. Customer relationship management is a 
cross-functional enterprise system that integrates and 
automates many of the customer-serving processes in 
sales, marketing, and customer services that interact 
with a company’s customers. CRM systems use informa- 
tion technology to support the many companies who are 
reorienting themselves into customer-focused businesses 
as a top business strategy. The major application compo- 
nents of CRM include contact and account manage- 
ment, sales, marketing and fulfillment, customer service 
and support, and retention and loyalty programs, all 
aimed at helping a company acquire, enhance, and retain 
profitable relationships with its customers as a primary 
business goal. However, many companies have found 
CRM systems difficult to implement properly due to 
lack of adequate understanding and preparation by man- 
agement and affected employees. Finally, many compa- 
nies are moving toward collaborative CRM systems that 
support the collaboration of employees, business part- 
ners, and the customers themselves in enhancing 
profitable customer relationships. 


Enterprise Resource Planning: The Business 
Backbone. Enterprise resource planning is a cross- 
functional enterprise system that integrates and auto- 
mates many of the internal business processes of a 
company, particularly those within the manufacturing, 
logistics, distribution, accounting, finance, and human 
resource functions of the business. Thus, ERP serves as 
the vital backbone information system of the enterprise, 
helping a company achieve the efficiency, agility, and 
responsiveness required to succeed in a dynamic busi- 
ness environment. ERP software typically consists of 
integrated modules that give a company a real-time 
cross-functional view of its core business processes, 
such as production, order processing, and sales, and its 
resources, such as cash, raw materials, production 
capacity, and people. However, properly implementing 
ERP systems is a difficult and costly process that has 
caused serious business losses for some companies that 
underestimated the planning, development, and train- 
ing that were necessary to reengineer their business 
processes to accommodate their new ERP systems. 
However, continuing developments in ERP software, 
including Web-enabled modules and e-business soft- 
ware suites, have made ERP more flexible and user- 
friendly, as well as extending it outward to a company’s 
business partners. 


Supply Chain Management: The Business Network. 
Supply chain management is a cross-functional inter- 
enterprise system that integrates and automates the net- 
work of business processes and relationships between a 
company and its suppliers, customers, distributors, and 
other business partners. The goal of SCM is to help a 
company achieve agility and responsiveness in meeting 
the demands of their customers and needs of their sup- 
pliers by enabling it to design, build, and sell its prod- 
ucts using a fast, efficient, and low-cost network of 
business partners, processes, and relationships, or 
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supply chain. SCM is frequently subdivided into supply 
chain planning applications, such as demand and supply 
forecasting, and supply chain execution applications, 
such as inventory management, logistics management, 
and warehouse management. Developing effective sup- 
ply chain systems and achieving the business goals of 
SCM has proven to be a complex and difficult challenge 
for many firms. But SCM continues to be a major con- 
cern and top e-business initiative as companies increase 
their use of Internet technologies to enhance integra- 
tion and collaboration with their business partners and 
improve the operational efficiency and business effec- 
tiveness of their supply chains. 


Functional Business Systems. Functional business 
information systems support the business functions of 
marketing, production/operations, accounting, finance, 
and human resource management through a variety of 
e-business operational and management information 
systems summarized in Figure 7.24. 


Marketing. Marketing information systems support 
traditional and e-commerce processes and management 
of the marketing function. Major types of marketing 
information systems include interactive marketing on 
e-commerce Web sites, sales force automation, cus- 
tomer relationship management, sales management, 
product management, targeted marketing, advertising 
and promotion, and market research. Thus, marketing 
information systems assist marketing managers in elec- 
tronic commerce product development and customer 
relationship decisions, as well as in planning advertising 
and sales promotion strategies and developing the 
e-commerce potential of new and present products, 

and new channels of distribution. 


Manufacturing. Computer-based manufacturing 
information systems help a company achieve computer- 
integrated manufacturing (CIM) and thus simplify, 
automate, and integrate many of the activities needed to 
quickly produce high-quality products to meet chang- 
ing customer demands. For example, computer-aided 
design using collaborative manufacturing networks 
helps engineers collaborate on the design of new prod- 
ucts and processes. Then manufacturing resource plan- 
ning systems help plan the types of resources needed in 
the production process. Finally, manufacturing execu- 
tion systems monitor and control the manufacture of 
products on the factory floor through shop floor 
scheduling and control systems, controlling a physical 
process (process control), a machine tool (numerical 
control), or machines with some humanlike work 
capabilities (robotics). 


Human Resource Management. Human resource 
information systems support human resource manage- 
ment in organizations. They include information 
systems for staffing the organization, training and 
development, and compensation administration. HRM 
Web sites on the Internet or corporate intranets have 
become important tools for providing HR services to 
present and prospective employees. 
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Accounting and Finance. Accounting information sys- 
tems record, report, and analyze business transactions 
and events for the management of the business enter- 
prise. Figure 7.32 summarizes six essential accounting 
systems: order processing, inventory control, accounts 
receivable, accounts payable, payroll, and general 


ledger. Information systems in finance support 
managers in decisions regarding the financing of a busi- 
ness and the allocation of financial resources within a 
business. Financial information systems include cash 
management, online investment management, capital 
budgeting, and financial forecasting and planning. 


Key Terms and Concepts l 


These are the key terms and concepts of this chapter. The page number of their first explanation is in parentheses. 


1. 


. Cross-functional enterprise 
systems (260) 14. Functional business 


. Customer relationship management 
(CRM) (266) 15. Human resource information 


. E-business (260) 


. Electronic data interchange 
(EDD (279) 17. Machine control (297) 


. Enterprise application 18. Manufacturing execution systems 


systems (302) 
systems (289) 


systems (297) 


architecture (260) (MES) (297) 


Accounting information 10. Enterprise application integration 19. Manufacturing information 
systems (300) (EAD) (282) systems (295) 
. Batch processing (285) 11. Enterprise collaboration systems 20. Marketing information systems (289) 
. Computer-aided manufacturing (ECS) (286) 21. Online transaction processing 
(CAM) (297) 12. Enterprise resource planning systems (284) 
. Computer-integrated (ERP) (272) 22. Process control (297) 
manufacturing (CIM) (296) 13. Financial management 


23. Real-time processing (285) 
24. Sales force automation (294) 
25. Supply chain (276) 


26. Supply chain management 
(SCM) (276) 


16. Interactive marketing (289) 27. ‘Targeted marketing (293) 


28. Transaction processing cycle (285) 


29. Transaction processing systems 
(TPS) (283) 


Review Quiz 


Match one of the key terms and concepts listed previously with one of the brief examples or definitions that follow. Try to find 
the best fit for the answers that seem to fit more than one term or concept. Defend your choices. 


—— 1. Using the Internet and other networks for 


e-commerce, enterprise collaboration, and 
Web-enabled business processes. 


—— 2. Information systems that cross the boundaries of 


the functional areas of a business to integrate and 
automate business processes. 


—— 3. Information systems that support marketing, pro- 


duction, accounting, finance, and human resource 
management. 


—— 4. Many business applications of IT today fit into a 


framework of interrelated cross-functional enter- 
prise applications. 


—— 5. Software that interconnects enterprise application 


systems. 


—— 6. Information systems for customer relationship 


management, sales management, and promotion 
management. 


—— 7. Collaborating interactively with customers in 


creating, purchasing, servicing, and improving 
products and services. 


—— 8. Using mobile computing networks to support 


salespeople in the field. 


—— 9. Information systems that support manufacturing 


operations and management. 


—— 10. A conceptual framework for simplifying and inte- 


grating all aspects of manufacturing automation. 


— 11. Using computers in a variety of ways to help manu- 


facture products. 


—— 12. Use electronic communications, conferencing, and 


collaborative work tools to support and enhance 
collaboration among teams and workgroups. 


—— 13. Using computers to operate a petroleum refinery. 


— 14. Using computers to help operate machine tools. 


___ 15. Information systems to support staffing, training 


and development, and compensation administration. 


___ 16. The automatic exchange of electronic business 


documents between the networked computers of 
business partners. 


—— 17. Accomplishes legal and historical record keeping 


and gathers information for the planning and con- 
trol of business operations. 


—— 18. Information systems for cash management, invest- 


ment management, capital budgeting, and finan- 
cial forecasting. 


—— 19. Performance monitoring and control systems for 


factory floor operations. 


—— 20. Customizing advertising and promotion methods 


to fit their intended audience. 


—— 21. A cross-functional system that helps a business de- 


velop and manage its customer-facing business 
processes. 


____ 22. A cross-functional enterprise system that helps a 


business integrate and automate many of its 
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internal business processes and information 
systems. 


—— 23. A cross-functional interenterprise system that helps 


a business manage its network of relationships and 
processes with its business partners. 


—— 24. A network of business partners, processes, and re- 


lationships that supports the design, manufacture, 
distribution, and sale of a company’s products. 


—— 25. Collecting and periodically processing transaction 


data. 


____ 26. Processing transaction data immediately after they 


are captured. 


—_— 27. A sequence of data entry, transaction processing, 


database maintenance, document and report gen- 
eration, and inquiry processing activities. 


____ 28. Systems that immediately capture and process 


transaction data and update corporate databases. 


___ 29. A cross-functional information system designed to 


process data arising from business transactions. 


Discussion Questions 


. Refer to the Real World Case on NetSuite, Berlin 
Packaging, and Churchill Downs in the chapter. In this 
case, how could CRM systems like those reviewed help 
a business that you know or deal with provide you with 
better service? Provide some examples other than those 
discussed in the case. 


. Why is there a strong trend toward cross-functional in- 
tegrated enterprise systems in the business use of infor- 
mation technology? 


. Which of the 13 tools for accounting information sys- 
tems summarized in Figure 7.29 do you feel are essen- 
tial for any business to have today? Which of them do 
you feel are optional, depending on the type of business 
or another factor? Explain. 


. Refer to the example about Enterprise Application In- 
tegration in the chapter. What other solutions could 
there be for the problem of information systems incom- 
patibility in business besides EAI systems? 


. Refer to the example about Chiquita Brands in the 
chapter. What are the most important HR applications 
a company should offer to its employees? Why? 


10. 


. How could sales force automation affect salesperson 


productivity, marketing management, and competitive 
advantage? 


. How can Internet technologies be involved in improv- 


ing a process in one of the functions of business? 
Choose one example and evaluate its business value. 


. Refer to the Real World Case on strategic HRM tech- 


nologies in the chapter. What are some of the most 
important HR applications a company should offer its 
employees? Why? Are any of them missing from the 
examples included in the case? 


. What are several e-business applications that you might 


recommend to a small company to help it survive and 
succeed in challenging economic times? Why? 


Refer to the example about virtual worlds in the 
chapter. Do these type of systems contribute to bottom- 
line profits for a business? Discuss the reasons for your 
answer. 


Analysis Exercises 


1. Application Service Provider Marketplace 


The traditional ASP definition includes Web interface 
(or thin client) and external, Internet-based, server-side 
processing and data storage. However, the business 


world hasn’t always felt constrained by these defini- 
tions. Microsoft, McAfee, QuickBooks, and others are 


providing Internet-based application services without 
meeting these exact criteria. 

Microsoft provides automatic Internet-based ap- 
plication maintenance as part of its one-time licensing 
fee. Through “automatic updates,” Microsoft provides 
updates, fixes, and security patches to its software 


306 © Module IIT / Business Applications 


without IT staff involvement and minimal end-user 
inconvenience. 

McAfee, in contrast, charges an annual maintenance 
fee that includes daily application and virus definition 
updates. McAfee provides it for one year as part of its 
license. After the first year, license holders may con- 
tinue to use the software, but they must pay a subscrip- 
tion fee if they want updates. Customers tend to pay for 
this subscription service to protect themselves from new 
virus threats. 


a. Would you use or recommend any of Intuit’s online 
application services (www.intuit.com) to a small 


your table, but feel free to add fields of interest to 
you. If data are not available for some fields (e.g., 
salary range) for a particular job, leave that field 
blank. 

b. Write a query that sorts jobs by region and then 
business function. 

c. Create a report that groups jobs by region and sorts 
jobs within each region by business function. 


Table: Jobs 


Field Sample Data (find your own field for 


this exercise) 


business? Why or why not? Employer Techtron Inc. 
b. America Online provides a free instant messaging Job Title Systems Analyst 
service (AIM, for AOL Instant Messenger). This Region Nor th East 
service enables instant messaging, file sharing, and Location Springfield, MA 
; ; : i Business Information Technology 
voice and video conferencing through a free applica- Panchos 
tion anyone can download and install. Is AOL oper- Description Work with team to analyze, design, and 


ating as an ASP? How so? 


c. Visit AOL’s “Enterprise AIM services” Web site 
(www.aimatwork.com). What additional features 
does AOL provide to enterprises? Why do you 
suppose AOL moved away from the ASP model 
for its enterprise solution? 


. eWork Exchange and eLance.com: Online Job 
Matching and Auctions 
Many opportunities await those who troll the big job 
boards, the free-agent sites, the auction services where 
applicants bid for projects, and the niche sites for spe- 
cialized jobs and skills. Examples of top job matching 
and auction sites are eWorkExchange and eLance.com. 
eWork Exchange (www.ework.com). No more sift- 
ing through irrelevant search results; fill out a list of 
your skills and let eWork Exchange’s proprietary tech- 
nology find the most suitable projects for you—no 
bidding required. 
eLance.com (www.elance.com). This global auction 
marketplace covers more than just IT jobs; it runs the 
gamut from astrology and medicine to corporate work 
and cooking projects. Register a description of your ser- 
vices, or go straight to browsing the listings of open 
projects—and then start bidding. A feedback section lets 
both employers and freelancers rate one another. 
a. Check out eWork Exchange, eLance, and other on- 
line job sites on the Web. 
b. Evaluate several sites on the basis of their ease of use 
and their value to job seekers and employers. 
c. Which Web site was your favorite? Why? 


3. Job Search Database 


Visit Web sites like Monster.com and others mentioned 
in this chapter to gather information about available 
jobs. Look up and record the relevant data for at least 
10 current job openings that are of interest to you or 
that meet criteria provided by your instructor. 


a. Create a database table to store key characteristics of 
these job opportunities. Include all of the job char- 
acteristics shown in the list that follows as fields in 


develop e-commerce systems. Skills in 
systems analysis, relational database design, 
and programming in Java are required 


Qualifications Bachelors degree in Information Systems 


or Computer Science, two years’ Java 
programming experience 


Salary Range — $48,000-60,000 depending on experience 


4. Performing an Industry Financial Analysis 


Employees apply their skills for the benefit of their or- 
ganization. In addition to skills specific to their business 
function, employees need a keen understanding of their 
business environment. This environment includes their 
organization’s business and financial structure as well as 
its relationships with competitors, customers, and rele- 
vant regulatory agencies. 

Interviewers expect job candidates to have basic 
knowledge in of each of these areas. Developing such 
an understanding demonstrates the candidate’s interest 
in the position and helps assure the interviewer that the 
candidate knows what he or she is getting into. Indeed, 
after a modest amount of research, job hunters may rule 
out certain opportunities based on what they discover. 
The Internet combined with good database skills can 
help simplify these tasks. 


a. Go to the Web sites of at least three firms you iden- 
tified in Problem 3. Obtain information about their 
financial operations, including net sales (or net reve- 
nue), after-tax income, and any current information 
affecting the organization or industry. 

b. Using the same database you created in Problem 3, 
create a new table that includes the fields described 
next. Add fields that may interest you as well. 

c. Add a field called OrganizationID to the Jobs table 
you created in the previous exercise. Make its field 
type Number (long integer). Write an update query 
that populates this new field with the appropriate 
values from the Organizations table’s Organization 
ID field. To do this, join the Jobs table and the Or- 
ganizations table using the Employer/Organization 
Name fields. This join will only work if the names 
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used are identical, so be sure you’ve typed them in d. Create a report that shows job opportunities by in- 
that way. Execute the query to complete the update. dustry. Within each industry, sort the records by the 
The tables already join using the Employer/Organi- organization’s name. Include Job Title, Globaliza- 
zation Name fields, so why might you want to also tion, Net Income, and Competitors in each record. 
join them on the OrganizationID field? Is the Em- Be sure to join the Jobs table and the Organizations 
ployer field in the Jobs table still necessary? table using the OrganizationID field. 


Table: Organizations 


Field Sample Data (find your own field for this exercise) 

OrganizationID Set this as your primary key and let the database automatically generate the value 

Organization Name Be sure to spell the name exactly as you did in the job opportunity table (copy and paste works 
best for this) 

Industry Legal, medical, consulting, education, etc. 

Globalization Local, regional, national, international 

Revenue Net sales or revenue from the most current financial reports 

Net Income (after tax) From the most current financial reports 

Competitors Names of key competitors 


Employees 


Number of employees 
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REAL WORLD 


Perdue Farms and Others: Supply 


Chain Management Meets the 
Holiday Season 


Ithough you’ve got only one turkey to handle at 
Thanksgiving, in 2003 the folks at Perdue Farms 
managed to move roughly one million turkeys, 
each within 24 hours of processing, to reach holiday tables 
across the nation. The task isn’t as tricky as it was before the 
food and agricultural products company invested $20 mil- 
lion in supply chain management technology five years ago. 

Using Manugistics forecasting software and supply chain 
planning tools, Perdue has become more adept at delivering 
the right number of turkeys to the right customers at the 
right time, says CIO Don Taylor. “As we get to November, 
we have live information at our fingertips,” he says. Before 
investing in supply chain management and forecasting soft- 
ware, Perdue’s managers went by the “gut feel” of its suppli- 
ers and customers, as well as the seasonal history of past 
consumption. 

It worked well enough; the company Arthur W. Perdue 
founded in 1920 has grown to reach annual sales of $2.7 bil- 
lion. With the forecasting and supply chain systems, Taylor 
says the privately held company monitors its products year- 
round, checking in more frequently as Thanksgiving ap- 
proaches. Although the third week of November is Perdue’s 
busiest time of year, the company’s output doesn’t change 
radically. The big difference is the form the turkeys take. Most 
of the year, it’s more food parts and deli meats, while this 
time of year it’s whole birds. 

Getting turkeys from farm to table is a race against time, 
so Perdue has turned to technology to make sure its prod- 
ucts arrive fresh. Each of its delivery trucks is equipped with 
a global positioning system that allows dispatchers to keep 
tabs on the turkeys en route from each of the company’s four 
distribution centers to their destinations. If a truck breaks 
down, a replacement is sent to rescue the palettes of poultry. 
“We know where our trucks are exactly at all times,” says 
Dan DiGrazio, Perdue’s director of logistics. 

Perdue uses everything but smoke signals to communi- 
cate with customers, staying in touch via telephone, e-mail, 
and videoconferencing. “We’re always looking at new tech- 
nologies as they come along to see what makes sense for us,” 
says Taylor. 

Black Friday and Cyber Monday sound nothing like the 
joyous season that’s supposed to follow. They’re more ominous 
and scary. Io many retailers and manufacturers those two 
pivotal days—and the month or so that follows—are just that. 

These two days are ominous because the holiday shop- 
ping crush that happens just after Thanksgiving is a make- 
or-break time for retailers and consumer goods companies 
looking to bolster their fourth-quarter revenues with loads 
of sales. They’re scary because what sells and what doesn’t 
is just so unpredictable. 

Nowhere is that uncertainty and accompanying pressure 
more intense than inside supply chain departments, where 
seasonal good cheer is replaced with gut-churning anxiety. 


“The holiday season is a completely difficult time for manu- 
facturers and retailers,” says Brian Tomlin, an assistant pro- 
fessor of operations, technology, and innovation management 
at the University of North Carolina’s Kenan-Flagler Busi- 
ness School. “They’re making educated guesses and bets on 
what demand is going to be, and they’re not going to get it 
right every single time.” 

Indeed, the period from just before Thanksgiving all the 
way into the New Year is usually the “moment of truth” for 
retail and manufacturing supply chain and e-commerce sys- 
tems. Not all of them are successful. Tomlin says that retail- 
ers and manufacturers face a delicate balancing act. “If 
they’re overly optimistic, they can have too much inventory, 
have to mark down everything and do fire sale prices,” he 
says. “If they’re overly pessimistic, they’ll have unsatisfied 
customers and leave a lot of money on the table.” 

There are a number of reasons for this. 

The first is that consumers’ tastes can change overnight, 
especially with toys, consumer electronics, and apparel. “The 
product cycles are so short; what’s cool today isn’t what’s go- 
ing to be cool tomorrow,” says Dave Haskins, CTO of 
Kinaxis, a vendor that offers on-demand response manage- 
ment for supply chains. Talking about his daughter’s recent 
cell phone purchase, he notes: “She’s buying a cell phone for 
reasons of fashion and not function. The consumer today is 
unbelievably fickle.” 

Another challenge is that sometimes one Christmas gift 
grabs more worldwide attention than any marketing or op- 
erations manager could have ever predicted even in his wild- 
est dreams. The resulting mass hysteria feeds on itself 
(remember the late 1990s Furby craze?) and becomes won- 
derful fodder for holiday news. It also leads the general pub- 
lic to think that “someone made a mistake,” says Tomlin, 
even though the situation was too difficult to foresee. Al- 
though it may seem like a nice problem to have, it’s a frus- 
trating situation for manufacturers who try to keep up 
inventory and retailers who try to keep their shelves 
stocked. 

So while speed and flexibility are paramount to respond 
to volatile demand, many retailers and suppliers are stuck 
because of one big self-inflicted wound: “Half of their sup- 
ply chain is sitting in Asia,” Haskins says. “Now suppliers 
have to deal with the fact that their product has to sit five 
weeks on a boat because the boardroom said, ‘We want it 
cheaper.” The result is that longer travel distances lead to 
elongated supply chains. 

That critical cost-versus-flexibility trade-off can rear its 
ugly head during the holidays, when marketing plans and 
inventory strategies have to be made far in advance. “The 
challenge is that suppliers need to make sourcing decisions 
early, and when they do that, demand uncertainty is high,” 
‘Tomlin says. Yet just overstocking inventory is a mistake 
companies are typically not foolish enough to make. 


“What smart companies do is figure out how best to use 
information as a substitute for inventory,” he says, “because 
inventory is an expensive strategy.” 

Haskins, whose company sells supply chain demand soft- 
ware, notes that many manufacturers’ supply chain systems 
work on monthly planning cycles, which don’t give enough 
information. There can also be a vast gap between the retail- 
ers’ systems and the point of sale (POS) data that they can 
send to their suppliers and what the suppliers can actually do 
with it. “The distribution signals—meaning what’s actually 
selling and the actual inventory—need to be coordinated on 
a continuous basis. Most organizations are still struggling to 
do that,” he says. 

The holiday shopping season will expose any supply 
chain weaknesses. “That’s because the window to respond to 
fluctuations is so much shorter,” Haskins says, adding that 
companies with better systems typically perform better 
during the holidays, and do better throughout the year. 

Haskins advises retailers and their suppliers to ask them- 
selves these questions right now: How quickly can I respond 
to something that happens in my supply chain? Am I provid- 
ing good, actionable information to my suppliers and filling 
in any gaps in the data? Am I acting on up-to-date point-of- 
sale data that Pm getting from my retailer? Do I understand 
exactly what is being sold every day? 

The first question—flexible, fast response to supply 
chain events—is a key tactic that can help both retailers and 
manufacturers move more product. For example, if demand 
for a manufacturer’s product is hot in the eastern part of the 
United States but not the West, companies have to make 
sure they have the right systems in place to see that, detect 


CASE STUDY QUESTIONS 


1. What are the key factors that determine the success 
or failure of supply chains during the holiday season? 
Which of these are or could be under the control of 
companies, and which are inherent in the end- 
consumer business? Provide several examples. 


2. Consider the increasing use of gift cards in lieu of gifts 
during the holiday season. What effects does this new 
practice introduce into demand planning and supply 
chain management? Consider the fact that virtually 
nothing is known about the recipients of gift cards. 
What strategies can retailers and their suppliers con- 
sider to accommodate these effects? 


w 


Prof. Brian Tomlin says that smart companies substitute 
information for inventory. What do you think he means 
by this statement? How do you think companies can 
take advantage of more extensive and accurate informa- 
tion to improve their inventory and logistic practices? 
Provide some examples. 
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the trend, and share that information, and the right proc- 
esses and logistics to adjust and remedy the situation. 

“Companies have to err on the side of flexibility rather 
than forcing in rigidity,” Haskins says. Of course, picking up 
on the supply chain signals, interpreting them, and reacting 
is still a monumental personnel and technical challenge for 
many manufacturers and retailers. 

“If you’re waiting for the store to tell you there’s a stock 
out, you’re way too late,” he says. 

Another trend that retailers and manufacturers need to 
be aware of is the exploding financial girth of the “gift-card 
season,” which has seen multibillion-dollar gains in the last 
several years. A 2006 report from AMR Research noted the 
trend and its substantial effect on inventory and staffing de- 
cisions for the months of January and February, when many 
people who received gift cards redeem them. 

Data from Ellen Davis, a communications director at 
the National Retail Federation, back that up: Only 20 per- 
cent of all gift cards are redeemed within the week after 
Christmas; the remaining 80 percent is spread over January 
and February. 

‘To match the spirit of the holiday season, Haskins offers 
a practical piece of advice for retailers and manufacturers 
that need each other more during the holidays than ever. 
“Remember,” he says, “you’re only as good as your suppli- 
ers’ supply chain and your suppliers’ ability to have a quick, 
integrated view of total demand and supply.” 


Source: Adapted from Sharron Luttrell, “Perdue CIO Talks Supply Chain 

Management,” CIO Magazine, November 1, 2003; and Thomas Wailgum, 

“The High-Stakes Search for Supply Chain Excellence during the Holiday 
Rush,” ClOMagazine, November 16, 2007. 


REAL WORLD ACTIVITIES 


1. Search the Internet for news stories about stocking 
(either over or under) problems that happened during 
recent holiday seasons. How can you relate your find- 
ings to the issues discussed in the case? Do you think 
the affected companies could have done something 
differently? Why or why not? Justify your answer. 


2. How do your holiday shopping practices compare to 
those discussed in the text? How early do you decide 
how much money you are going to spend and what you 
are going to purchase? Break into small groups to com- 
pare your experiences and how those feed into the 
issues identified in the case: demand uncertainty and 
planning. 
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Introduction to 
e-Commerce 


The Scope of 
e-Commerce 


e-Commerce 


Technologies 


e-Commerce Fundamentals 


E-commerce is changing the shape of competition, the speed of action, and the streamlining 
of interactions, products, and payments from customers to companies and from companies 
to suppliers. 


For most companies today, electronic commerce is more than just buying and sell- 
ing products online. Instead, it encompasses the entire online process of developing, 
marketing, selling, delivering, servicing, and paying for products and services trans- 
acted on internetworked, global marketplaces of customers, with the support of a 
worldwide network of business partners. In fact, many consider the term “e-com- 
merce” to be somewhat antiquated. Given that many young businesspeople have 
grown up in a world in which online commerce has always been available, it may soon 
be time to eliminate the distinction between e-commerce and e-business and accept 
that it is all just “business as usual.” Until then, we will retain the term “e-commerce” 
because it allows for a clearer picture of the differences between online and more 
traditional business transactions. 

As we will see in this chapter, e-commerce systems rely on the resources of the 
Internet and many other information technologies to support every step of this process. 
We will also see that most companies, large and small, are engaged in some form of 
e-commerce activities. Therefore, developing an e-commerce capability has become a 
competitive necessity for most businesses in today’s marketplace. 

Read the Real World Case below. We can learn a lot about the challenges compa- 
nies face in the online world from this example. See Figure 8.1. 


Figure 8.2 illustrates the range of business processes involved in the marketing, 
buying, selling, and servicing of products and services in companies that engage in 
e-commerce. Companies involved in e-commerce as either buyers or sellers rely on 
Internet-based technologies and e-commerce applications and services to accom- 
plish marketing, discovery, transaction processing, and product and customer 
service processes. For example, e-commerce can include interactive marketing, or- 
dering, payment, and customer support processes at e-commerce catalog and auc- 
tion sites on the World Wide Web. However, e-commerce also includes e-business 
processes such as extranet access of inventory databases by customers and suppliers 
(transaction processing), intranet access of customer relationship management 
systems by sales and customer service reps (service and support), and customer col- 
laboration in product development via e-mail exchanges and Internet newsgroups 
(marketing/discovery). 

The advantages of e-commerce allow a business of virtually any size that is located 
virtually anywhere on the planet to conduct business with just about anyone, any- 
where. Imagine a small olive oil manufacturer in a remote village in Italy selling its 
wares to major department stores and specialty food shops in New York, London, 
‘Tokyo, and other large metropolitan markets. The power of e-commerce allows geo- 
physical barriers to disappear, making all consumers and businesses on Earth potential 
customers and suppliers. 


What technologies are necessary for e-commerce? The short answer is that most in- 
formation technologies and Internet technologies that we discuss in this text are, in 
some form, involved in e-commerce systems. A more specific answer is illustrated in 
Figure 8.3, which gives an example of the technology resources required by many 
e-commerce systems. The figure illustrates some of the hardware, software, data, and 
network components used by FreeMarkets Inc. to provide business-to-business (B2B) 
online auction e-commerce services. 


REAL WORLD 


reputation is a fragile thing—especially on the 

Internet, where trademarked images are easily bor- 

rowed, corporate secrets can be divulged anony- 
mously in chat rooms, and idle speculation and malicious 
commentary on a blog can affect a company’s stock price. 
Brands are under constant attack, but companies such as 
BrandProtect, MarkMonitor, and NameProtect (now part of 
Corporation Services Company) are stepping in to offer 
companies some artillery in the fight for control of their 
brands and reputations. 

Brian Maynard, director of marketing for KitchenAid, a 
division of Whirlpool, had a rather unique problem. Like 
the classic Coke bottle and Disney’s Mickey Mouse ears, the 
silhouette of the KitchenAid mixer, that colorful and distinc- 
tively rounded wedding registry staple, is a registered trade- 
mark. Although the KitchenAid stand mixer silhouette has 
been a registered trademark since the mid-1990s, it has been 
a well-recognized symbol since the current design was intro- 
duced in the 1930s. “The KitchenAid mixer is an incredible 
asset so it is important for us to protect both the name and 
the image from becoming generic,” says Maynard, who re- 
ports that the equity of the brand has been estimated to be in 
the tens of millions of dollars. Any kind of violations that go 
unnoticed can quickly erode that precious equity. 

KitchenAid had experienced some problems on the Web 
with knockoffs and unauthorized uses of the mixer’s image, 
but getting a handle on the many and varied online trade- 
mark infringements seemed daunting. Maynard knew that 
historically, corporate brands that were not well-protected 
and policed by their owners had been ruled generic by the 


FIGURE 8. 1 
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Companies that do business online must police 
unauthorized use of their brand names, logos, and 
other trademarks to protect their investments. 


Source: Courtesy of Microsoft®. 
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KitchenAid and the Royal Bank of 
Canada: Do You Let Your Brand Go 
Online All by Itself? 


courts—aspirin and escalator are two examples. “Through- 
out history terms like escalator and aspirin have become ge- 
neric simply because people did not do the work to protect 
them,” says Maynard. “To avoid that fate, you have to show 
the courts that you have put every effort into protecting your 
brand. If you don’t police your brand, courts will typically 
rule that the mark is no longer meaningful and has become 
ubiquitous.” So when he received a cold-call from Brand- 
Protect, he was intrigued. 

Criminals hijacking online corporate brands and masquer- 
ading for profit, however, are ramping up their efforts. Dubbed 
“brandjacking” by MarkMonitor Inc., a San Francisco—based 
brand protection service provider, the practice is becoming a 
major threat to household names. “Not only is the volume of 
these abuses significant, but abusers are becoming alarmingly 
savvy marketers,” says Frederick Felman, MarkMonitor’s chief 
marketing officer. In its first Brandjacking Index report, Mark- 
Monitor tracked 25 of the top 100 brands for three weeks by 
monitoring illegal or unethical tactics that ranged from 
cybersquatting to pay-per-click fraud. Media companies 
made up the greatest percentage of targeted brands. 

Cybersquatting, which usually means registering a URL 
that includes a real brand’s name, easily took the prize for 
the most threats. MarkMonitor tracked more than 286,000 
instances in the three-week span. “When I heard about the 
solution I didn’t even realize there was anything like that out 
there,” says Maynard. “I saw right away that it solved a prob- 
lem I didn’t even realize existed.” 

BrandProtect uses a technology platform that functions 
like a giant spider, mapping the Web and identifying what’s 
going on in its darkest recesses. The mapping technology is 
combined with a filter and human analysis component that 
identifies and returns to its clients actionable data on illicit 
activities that may adversely affect their corporate identity. 
Depending on the client’s chosen service level, those activi- 
ties can include any of 22 categories of infractions—from 
phishing to counterfeiting, misuse of corporate logos and 
trademarked product images, domain infractions, and em- 
ployees blogging about corporate trade secrets. Staying 
ahead of the many ways that a company’s brand can be com- 
promised or diluted online is a challenge that Kevin Joy, vice 
president of marketing for BrandProtect, compares to a 
never-ending game of Whack-a-Mole. 

The challenge of brand protection, however, has grown 
exponentially for companies operating in the online world. 
“With the advent of the Internet a few things happened,” 
explains Maynard. “Everyone in the world could now see the 
mixer so the potential for misuse of our trademark became 
greater. Because it is so well known, there was more risk of 
companies creating knock-off products and marketing them 
under other names. So it was even more important than ever 
to prove that we were putting every effort into protecting 
the brand and our trademarks.” 
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Other types of violations also surfaced as KitchenAid’s on- 
line policing activities grew. Some, such as sites using the logo 
without permission, were minor and could be easily fixed with 
a warning letter. Others were not so innocent, such as using 
the logo to create links to illegal sites. “We spent a lot of time 
training people and policing online activities,” says Maynard. 

‘The many successes have made the relationship worth- 
while. Recently, Maynard was impressed by how quickly he 
was able to resolve a case of domain infraction. A small vendor 
that works with KitchenAid was experimenting with registering 
URLs such as shopkitchenaid.com and buykitchenaid.com for 
marketing purposes. That Friday when Maynard received his 
report, he noticed the new URLs, recognized the name of the 
owner, and called his contact at the company to explain that 
any URLs containing the name KitchenAid had to be owned 
by the company. Maynard says his contact was shocked by 
how quickly KitchenAid had gotten on top of the issue. “He 
didn’t even know he couldn’t have ownership of that URL and 
was stunned that we knew about it so quickly.” 

Given the strategic importance of the KitchenAid brand, 
Maynard says BD-BrandProtect has played a major role in 
bringing him peace of mind. “It is my responsibility to protect 
this brand and I am not going to allow any loss of equity on my 
watch. In fact, the value of the stand mixer silhouette continues 
to increase year after year. Before BD-BrandProtect, however, 
I thought I was out there doing it on my own. Now I know I 
can leave the brand in better condition than when I started.” 

As Manager of Brand Standards for the Royal Bank of 
Canada, Lise Buisson knows that the job of protecting the 
bank’s brand online involves a lot more than finding out when 
someone has cut and pasted a logo onto their site without per- 
mission. “As brands become more valued, any improper use of 
your brand can become a reputational risk. When someone 
displays your logo, for example, it becomes a de facto endorse- 
ment, whether we have approved it or not. We have to be 
careful about things like that.” Royal Bank of Canada and its 
subsidiaries operate under the master brand name of RBC. 


CASE STUDY QUESTIONS 


1. Consider your own online shopping patterns. How 
much weight do you place on the presence of a name 
or logo or other trademark (such as the KitchenAid 
silhouette) on a Web site when purchasing goods 
or services? Do you ever stop to consider whether 
you may have been misled? How could you tell the 
difference? 


2. Brian Maynard of KitchenAid notes that the develop- 
ment of the Internet changed the problem of brand 
policing. What are some of these changes? What new 
challenges can you think of that did not exist in the 
pre-online world? Provide several examples. 


3. The companies mentioned in the case (e.g., Kitchen- 
Aid, RBC, Disney, and Coke) were well established and 
enjoyed strong brand recognition well before the ad- 
vent of the Internet. Do you think online-only compa- 
nies face the same problems as they do? Why or why 
not? Justify the rationale for your answer. 


With 70,000 full- and part-time employees serving 15 million 
clients through offices in North America and 34 countries 
around the world, RBC is the largest bank in Canada. 

“We didn’t expect to see what we saw. We were inundated. 
No one realized how easy it was for someone to come to our 
site, grab a logo, and put it somewhere else. It forced us to 
sit down as a group and figure out what we could do,” says 
Buisson. She quickly discovered that a majority of the infrac- 
tions noted were harmless and did not require a second thought. 
“Tn most cases the users were well meaning,” she says. “It could 
be a charity site or mortgage partner using our logo. I would 
say that 90 percent of these incidents were quite harmless.” 

“BD-BrandProtect immediately flagged and dealt with a 
bank in the North Sea region that had used our logo and 
positioned themselves with another name. When anyone 
misrepresents themselves as an affiliate of ours, it makes us 
very nervous,” notes Buisson. Where concerns are raised, 
RBC will take the appropriate measures, from issuing a po- 
lite request to the user to cease using their brand to initiat- 
ing legal action. “In the vast majority of cases a polite letter 
is enough.” Once a year, RBC reviews its branding policies 
to ensure that the reports continue to reflect their top pri- 
orities. It has also established a number of policies to ensure 
that the appropriate follow-up measures are used when re- 
quired. “If, for example, we find advertising of our logo on a 
gambling site, we now have a policy about that,” she says. 

Buisson says that as Internet activities continue to esca- 
late, she has come to realize that the job of monitoring on- 
line brand activities properly would just have been too much 
for departmental staff to handle. “I’m a big proponent of go- 
ing to the experts and sitting down and working with them. 
It’s very reassuring to work with a company that’s looking 
out for us. It certainly helps some of us sleep at night.” 


Source: Adapted from Daintry Duffy, “Brand Aid for a Manufacturer’s Online 
Property,” CIO Magazine, September 17, 2007; Royal Bank of Canada Case 
Study and KitchenAid Case Study, www.bdbrandprotect.com, accessed April 22, 
2008; and Gregg Ketzer, “Brandjackers’ Make Millions Feeding Off Internet 
Brand Names,” Computerworld, April 30, 2007. 


REAL WORLD ACTIVITIES 


1. Online trust providers such as eTrust (www.etrust.org) 
and others review privacy policies, including informa- 
tion collection and use, sharing and disclosure, and se- 
curity, and then certify Web sites as meeting their 
standards. Companies that achieve this can then display 
a logo to that effect. Search the Internet to discover 
how these providers prevent unauthorized lifting and 
use of their certification logos by Web sites that have 
not gone through the process. Prepare a report to sum- 
marize your findings. Have you ever noticed these 
logos? Does it make any difference to you as a con- 
sumer whether a Web site displays them or not? 


2. The case features technology developed by BrandPro- 
tect (www.brandprotect.com); competitors include 
MarkMonitor (www.markmonitor.com) and NamePro- 
tect (www.cscprotectbrands.com). Visit their Web sites 
to compare and contrast their offerings. Then break 
into small groups to compare your findings and discuss 
new features that you believe are lacking, as well as why 
you think these vendors should include these features. 
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FIGURE 8.2 E-commerce involves accomplishing a range of business processes to support the electronic buying 


and selling of goods and services. 
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Forrester: Web 2.0 
Has a Bright Future 


Categories of 
e-Commerce 


As a standard enterprise tool, Web 2.0 has a bright future, one for which companies 
are expected to spend $4.6 billion by 2013 to integrate into their corporate comput- 
ing environments, according to a Forrester Research report. Though still considered 
an upstart technology, Forrester believes that conventional Web 2.0 elements—social 
networking, RSS, blogs, wikis, mashups, podcasting, and widgets—are fast becoming 
the norm for communicating with employees and customers. The report highlights 
megacompanies such as General Motors, McDonald’s, Northwestern Mutual Life 
Insurance, and Wells Fargo among those who have already jumped into the Web 2.0 
pool with both feet. In addition, some 56 percent of North American and European 
enterprises consider Web 2.0 to be a priority. 

“Tf I wanted to be anywhere in the Web 2.0 economy, I’d want to be on the enter- 
prise side,” says report author and Forrester Research analyst Oliver Young. “We’re 
seeing enterprise-class software coming from startups, but we’re seeing them through 
very low price points . . . so it [Web 2.0] will never be a mega market,” says Young. 
“Tt will eventually disappear into the fabric of the enterprise, despite the major effects 
the technology will have on how businesses market their products and optimize their 
workforces.” 

The consumer-facing ad-funded Web 2.0 sites like Facebook, MySpace, and 
Delicious will also have difficulty as similar technologies are incorporated into the 
enterprise. “Even Google is having a hard time selling the advertising,” Young said. 
Still, start-ups have much to gain in pursuing the Web 2.0 world, such as under- 
standing how companies are adopting their technology. Small groups within a com- 
pany are more likely to adopt blogs, wikis, mashups, and widgets. The key to 
adoption, he adds, is to show how there is a business value in using the Web 2.0 
tools. “Web 2.0 is not a critical ‘must have’ for any company at this point, but it’s 
more than likely that your competition is using it and is showing faster results be- 
cause of it.” 


Source: Adapted from Michael Singer, “Web 2.0: Companies Will Spend $4.6 Billion by 2013, Forrester Predicts,” 
InformationWeek, April 21, 2008. 


Many companies today are participating in or sponsoring four basic categories of 
e-commerce applications: business-to-consumer, business-to-business, consumer- 
to-consumer, and business-to-government e-commerce. Note: We do not explicitly 
cover business-to-government (B2G) and e-government applications because they 
are beyond the scope of this text, but many e-commerce concepts apply to such 
applications. 


Business-to-Consumer (B2C) e-Commerce. In this form of e-commerce, busi- 
nesses must develop attractive electronic marketplaces to sell products and services to 
consumers. For example, many companies offer e-commerce Web sites that provide 
virtual storefronts and multimedia catalogs, interactive order processing, secure elec- 
tronic payment systems, and online customer support. The B2C marketplace is grow- 
ing like a wildfire but still remains the tip of the iceberg when compared with all 
online commerce. 


Consumer-to-Consumer (C2C) e-Commerce. The huge success of online auc- 
tions like eBay, where consumers (as well as businesses) can buy from and sell to one 
another in an auction process at an auction Web site, makes this e-commerce model 
an important e-commerce business strategy. Thus, participating in or sponsoring 
consumer or business auctions is an important e-commerce alternative for B2C, C2B 
(consumer-to-business), or B2B e-commerce. Electronic personal advertising of 


Essential 
e-Commerce 
Processes 
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products or services to buy or sell by consumers at electronic newspaper sites, con- 
sumer e-commerce portals, or personal Web sites is also an important form of C2C 
e-commerce. 


Business-to-Business (B2B) e-Commerce. If B2C activities are the tip of the 
iceberg, B2B represents the part of the iceberg that is under the water—the biggest 
part. This category of e-commerce involves both e-business marketplaces and direct 
market links between businesses. For example, many companies offer secure Internet 
or extranet e-commerce catalog Web sites for their business customers and suppliers. 
Also very important are B2B e-commerce portals that provide auction and exchange 
marketplaces for businesses. Others may rely on electronic data interchange (EDD via 
the Internet or extranets for computer-to-computer exchange of e-commerce docu- 
ments with their larger business customers and suppliers. 


The essential e-commerce processes required for the successful operation and man- 
agement of e-commerce activities are illustrated in Figure 8.4. This figure outlines 
the nine key components of an e-commerce process architecture that is the foundation 
of the e-commerce initiatives of many companies today. We concentrate on the role 
these processes play in e-commerce systems, but you should recognize that many of 
these components may also be used in internal, noncommerce e-business applica- 
tions. An example would be an intranet-based human resource system used by a 
company’s employees, which might use all but the catalog management and prod- 
uct payment processes shown in Figure 8.4. Let’s take a brief look at each essential 
process category. 


FIGURE 8.4 This e-commerce process architecture highlights nine essential categories of e-commerce processes. 
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Access Control and 
Security 


Profiling and 
Personalizing 


Search Management 


Content and Catalog 
Management 


E-commerce processes must establish mutual trust and secure access between the 
parties in an e-commerce transaction by authenticating users, authorizing access, 
and enforcing security features. For example, these processes establish that a cus- 
tomer and e-commerce site are who they say they are through user names and pass- 
words, encryption keys, or digital certificates and signatures. The e-commerce site 
must then authorize access to only those parts of the site that an individual user needs 
to accomplish his or her particular transactions. Thus, you usually will be given ac- 
cess to all resources of an e-commerce site except for other people’s accounts, re- 
stricted company data, and Web master administration areas. Companies engaged in 
B2B e-commerce may rely on secure industry exchanges for procuring goods and 
services or Web trading portals that allow only registered customers to access trading 
information and applications. Other security processes protect the resources of 
e-commerce sites from threats such as hacker attacks, theft of passwords or credit 
card numbers, and system failures. We discuss many of these security threats and 
features in Chapter 11. 


Once you have gained access to an e-commerce site, profiling processes can occur that 
gather data on you and your Web site behavior and choices, as well as build electronic 
profiles of your characteristics and preferences. User profiles are developed using pro- 
filing tools such as user registration, cookie files, Web site behavior tracking software, 
and user feedback. These profiles are then used to recognize you as an individual user 
and provide you with a personalized view of the contents of the site, as well as product 
recommendations and personalized Web advertising as part of a one-to-one marketing 
strategy. Profiling processes are also used to help authenticate your identity for ac- 
count management and payment purposes and gather data for customer relationship 
management, marketing planning, and Web site management. Some of the ethical 
issues in user profiling are discussed in Chapter 11. 


Efficient and effective search processes provide a top e-commerce Web site capability 
that helps customers find the specific product or service they want to evaluate or buy. 
E-commerce software packages can include a Web site search engine component, or a 
company may acquire a customized e-commerce search engine from search technol- 
ogy companies like Google and Requisite Technology. Search engines may use a com- 
bination of search techniques, including searches based on content (e.g., a product 
description) or parameters (e.g., above, below, or between a range of values for multi- 
ple properties of a product). 


Content management software helps e-commerce companies develop, generate, 
deliver, update, and archive text data and multimedia information at e-commerce 
Web sites. For example, German media giant Bertelsmann, part owner of 
BarnesandNoble.com, uses StoryServer content manager software to generate Web 
page templates that enable online editors from six international offices to easily 
publish and update book reviews and other product information, which are sold 
(syndicated) to other e-commerce sites. 

E-commerce content frequently takes the form of multimedia catalogs of product 
information. As such, generating and managing catalog content is a major subset of 
content management, or catalog management. For example, W.W. Grainger & Co., a 
multibillion-dollar industrial parts distributor, uses the CenterStage catalog manage- 
ment software suite to retrieve data from more than 2,000 supplier databases, stand- 
ardize the data, translate it into HTML or XML for Web use, and organize and 
enhance the data for speedy delivery as multimedia Web pages at its www.grainger. 
com Web site. 

Content and catalog management software works with the profiling tools we men- 
tioned previously to personalize the content of Web pages seen by individual users. 
For example, Travelocity.com uses OnDisplay content manager software to push 
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personalized promotional information about other travel opportunities to users while 
they are involved in an online travel-related transaction. 

Finally, content and catalog management may be expanded to include product 
configuration processes that support Web-based customer self-service and the mass 
customization of a company’s products. Configuration software helps online customers 
select the optimum feasible set of product features that can be included in a finished 
product. For example, both Dell Computer and Cisco Systems use configuration 
software to sell built-to-order computers and network processors to their online 
customers. 


Nothing is as heart-wrenching to an e-tailer as watching a customer abandon a full 
cart just seconds before consummating the deal. To be so close yet so cashless is 
more than frustrating; it’s harmful to an e-tailer’s health. A virtual armory of tools are 
in use to woo, cajole, prompt, and push consumers to make the buy—but are they 
working, or are they turning even more customers away? 

“Most fall woefully short,” says Matthew Brown, senior director of e-commerce 
and interactive marketing at MarketNet. “Instead of focusing on using tools and 
technologies to help the customer, much more thought and time needs to go into 
Web site architecture in the first place.” 

Many theories are being tossed about as to why consumers turn fickle a hair short 
of the finish line. For each theory, there are a multitude of technological solutions. 
“Retailers continue to launch and test technologies and features aimed at reducing 
abandonment or increasing online conversion,” says Jessica Ried, a director of retail 
strategy at Resource Interactive. “In our experience, it is difficult to know for sure if 
any particular one is going to be effective for a given retailer without testing it with 
that retailer’s customer base, or at least having a solid understanding of existing cus- 
tomer behaviors on the site through site analytics and surveys.” 

Once an e-tailer understands the true obstacles to closing the deal, there are a 
range of tools available to clear the way to bigger profits. The most commonly de- 
ployed are live chat, pop-up discounts, and follow-up email programs; some are 
achieved through the standard use of cookies, others via pixel-based triggers. Third- 
person endorsements are also frequently used. “Hosting consumer-generated con- 
tent such as ratings and reviews has typically allowed retailers to improve conversions,” 
explains Ried, “as customers are more confident with their selections. That’s because 
they have access to an ‘unbiased’ opinion, building trust rather than having to rely 
solely on the marketing copy on the retailer’s site.” 

“We use Liveperson chat extensively. It has been an incredible tool for answering 
any last-minute doubts during the last few states of the transaction,” notes Adrian 
Salamunovic, cofounder of DNA 11, a multimillion-dollar e-commerce art retailer. 
“Our average transaction is over US$500, so this is very important to us.” 

“Tt pays for itself many times over each month,” he adds. “For us, interrupting 
the client with pop-ups or invitations to chat really doesn’t work—in fact, it does the 
opposite. We’ve watched customers bounce (exit) quite quickly after being inter- 
rupted with pop-ups.” 

Therein lies the conundrum. No two customers are identical. At least some per- 
sonalized customization is essential. There is a point, however, at which actions con- 
sidered helpful by the retailer are perceived as intrusive by the consumer. “Some 
customers welcome the help; others are unnerved by the Big Brother effect it can 
suggest,” says Resource Interactive’s Ried. “Start by considering what is known about 
consumer behavior in evaluating which technologies, features, and functionalities to 
explore first.” 


Source: Adapted from Pam Baker, “Rescuing the e-Commerce Deal When the Customer’s Walking Way,” E-Commerce 
Times, April 24, 2009. 
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Many of the business processes in e-commerce applications can be managed and partially 
automated with the help of workflow management software. E-business workflow sys- 
tems for enterprise collaboration help employees electronically collaborate to accom- 
plish structured work tasks within knowledge-based business processes. Workflow 
management in both e-business and e-commerce depends on a workflow software engine 
containing software models of the business processes to be accomplished. The workflow 
models express the predefined sets of business rules, roles of stakeholders, authorization 
requirements, routing alternatives, databases used, and sequence of tasks required for 
each e-commerce process. Thus, workflow systems ensure that the proper transactions, 
decisions, and work activities are performed, and the correct data and documents are 
routed to the right employees, customers, suppliers, and other business stakeholders. 

As many of you begin your business careers, you will be charged with the respon- 
sibility of driving cost out of existing business processes while maintaining or improv- 
ing the effectiveness of those processes. As you continue to acquire a greater 
appreciation for, and understanding of, how technology can benefit business, you will 
explore workflow management as the key to this optimization of cost and effectiveness 
throughout the business. 

For example, Figure 8.5 illustrates the e-commerce procurement processes of the 
MS Market system of Microsoft Corp. Microsoft employees use its global intranet and 
the catalog/content management and workflow management software engines built 
into MS Market to purchase electronically more than $3 billion annually of business 
supplies and materials from approved suppliers connected to the MS Market system 
by their corporate extranets. 


MS Market is an internal e-commerce purchasing system that works on Microsoft’s 
intranet. MS Market has drastically reduced the personnel required to manage low- 
cost requisitions and gives employees a quick, easy way to order materials without 
being burdened with paperwork and bureaucratic processes. These high-volume, 
low-dollar transactions represent about 70 percent of total volume but only 3 percent 
of Microsoft’s accounts payable. Employees were wasting time turning requisitions 
into purchase orders (POs) and trying to follow business rules and processes. Manag- 
ers wanted to streamline this process, so the decision was made to create a requisi- 
tioning tool that would take all the controls and validations used by requisition 
personnel and push them onto the Web. Employees wanted an easy-to-use online 
form for ordering supplies that included extranet interfaces to procurement partners, 
such as Boise Cascade and Marriott. 
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Collaboration and 
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How does this system work? Let’s say a Microsoft employee wants a technical book. 
He goes to the MS Market site on Microsoft's intranet, and MS Market immediately 
identifies his preferences and approval code through his log-on ID. The employee se- 
lects the Barnes & Noble link, which brings up a catalog, order form, and a list of 
hundreds of books with titles and prices that have been negotiated between Microsoft 
buyers and Barnes & Noble. He selects a book, puts it in the order form, and com- 
pletes the order by verifying his group’s cost center number and manager’s name. 

The order is transmitted immediately to the supplier, cutting down on delivery 
time, as well as accounting for the payment of the supplies. Upon submission of 
the order, MS Market generates an order tracking number for reference, sends noti- 
fication via e-mail to the employee’s manager, and transmits the order over the Inter- 
net to Barnes & Noble for fulfillment. In this case, since the purchase total is only 
$40, the manager’s specific approval is not required. Two days later, the book arrives 
at the employee’s office. Thus, MS Market lets employees easily order low-cost items 
in a controlled fashion at a low cost, without going through a complicated PO 
approval process. 


Source: Adapted from Microsoft IT Showcase, “MS Market: Business Case Study,” 2002. 


Most e-commerce applications are event-driven systems that respond to a multitude of 
events—from a new customer’s first Web site access, to payment and delivery proc- 
esses, to innumerable customer relationship and supply chain management activities. 
That is why event notification processes play an important role in e-commerce sys- 
tems; customers, suppliers, employees, and other stakeholders must be notified of all 
events that might affect their status in a transaction. Event notification software works 
with workflow management software to monitor all e-commerce processes and record 
all relevant events, including unexpected changes or problem situations. Then it works 
with user-profiling software to notify all involved stakeholders automatically of im- 
portant transaction events using appropriate user-preferred methods of electronic 
messaging, such as e-mail, newsgroup, pager, and fax communications. This notifica- 
tion includes a company’s management, who then can monitor their employees’ re- 
sponsiveness to e-commerce events and customer and supplier feedback. 

For example, when you purchase a product at a retail e-commerce Web site like 
Amazon.com, you automatically receive an e-mail record of your order. Then you may 
receive e-mail notifications of any change in product availability or shipment status 
and, finally, an e-mail message notifying you that your order has been shipped and is 
complete. 


This major category of e-commerce processes consists of those that support the vital 
collaboration arrangements and trading services needed by customers, suppliers, and 
other stakeholders to accomplish e-commerce transactions. Thus, in Chapter 2, we 
discussed how a customer-focused e-business uses tools such as e-mail, chat systems, 
and discussion groups to nurture online communities of interest among employees and 
customers to enhance customer service and build customer loyalty in e-commerce. 
The essential collaboration among business trading partners in e-commerce may also 
be provided by Internet-based trading services. For example, B2B e-commerce Web 
portals provided by companies like Ariba and Commerce One support matchmaking, 
negotiation, and mediation processes among business buyers and sellers. In addition, 
B2B e-commerce is heavily dependent on Internet-based trading platforms and por- 
tals that provide online exchange and auctions for e-business enterprises. Therefore, 
the online auctions and exchanges developed by companies like FreeMarkets are revo- 
lutionizing the procurement processes of many major corporations. We will discuss 
these and other e-commerce applications in Section II. 
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Payment for the products and services purchased is an obvious and vital set of proc- 
esses in e-commerce transactions. Payment processes, however, are not simple because 
of the nearly anonymous electronic nature of transactions taking place between the 
networked computer systems of buyers and sellers and the many security issues in- 
volved. E-commerce payment processes are also complex because of the wide variety 
of debit and credit alternatives, as well as the financial institutions and intermediaries 
that may be part of the process. Therefore, a variety of electronic payment systems 
have evolved over time. In addition, new payment systems are being developed and 
tested to meet the security and technical challenges of e-commerce over the Internet. 


Most e-commerce systems on the Web involving businesses and consumers (B2C) 
depend on credit card payment processes, but many B2B e-commerce systems rely on 
more complex payment processes based on the use of purchase orders, as was illus- 
trated in Figure 8.5. However, both types of e-commerce typically use an electronic 
shopping cart process, which enables customers to select products from Web site cata- 
log displays and put them temporarily in a virtual shopping basket for later checkout 
and processing. Figure 8.6 illustrates and summarizes a B2C electronic payment sys- 
tem with several payment alternatives. 


Electronic funds transfer (EFT) systems are a major form of electronic payment systems 
in banking and retailing industries. EFT systems use a variety of information tech- 
nologies to capture and process money and credit transfers between banks and busi- 
nesses and their customers. For example, banking networks support teller terminals at 
all bank offices and automated teller machines (ATMs) at locations throughout the 
world. Banks, credit card companies, and other businesses may support pay-by-phone 
services. Very popular also are Web-based payment services, such as PayPal and 
BillPoint for cash transfers, and CheckFree and Paytrust for automatic bill payment, 


Customer Merchant 


Request 


m Verify merchant 
m Receive order info 

m Receive payment info 
m Confirm order 


m Verify customer 
m Review payment info 
m Authorize or deny payment 


Online third-party 
computers with 
links to multiple 
payment systems 


Credit cards Bank accounts Online buying e-Bill payment Electronic cash 
VER Dei cards Baylon o ecke pipcini 


Secure Electronic 
Payments 


FIGURE 8.7 

VeriSign provides electronic 
payment, security, and many 
other e-commerce services. 


Chapter 8 / e-Commerce Systems @ 323 


that enable the customers of banks and other bill payment services to use the Internet 
to pay bills electronically. In addition, most point-of-sale terminals in retail stores are 
networked to bank EFT systems, which makes it possible for you to use a credit card 
or debit card to pay instantly for gas, groceries, or other purchases at participating 
retail outlets. 


When you make an online purchase on the Internet, your credit card information is 
vulnerable to interception by network sniffers, software that easily recognizes credit 
card number formats. Several basic security measures are being used to solve this se- 
curity problem: (1) encrypt (code and scramble) the data passing between the cus- 
tomer and merchant, (2) encrypt the data passing between the customer and the 
company authorizing the credit card transaction, or (3) take sensitive information off- 
line. Note: Because encryption and other security issues are discussed in Chapter 11, 
we will not explain how they work in this section. 

For example, many companies use the Secure Socket Layer (SSL) security method 
developed by Netscape Communications that automatically encrypts data passing be- 
tween your Web browser and a merchant’s server. However, sensitive information is 
still vulnerable to misuse once it’s decrypted (decoded and unscrambled) and stored on 
a merchant’s server, so a digital wallet payment system was developed. In this method, 
you add security software add-on modules to your Web browser. That enables your 
browser to encrypt your credit card data in such a way that only the bank that author- 
izes credit card transactions for the merchant gets to see it. All the merchant is told is 
whether your credit card transaction is approved or not. 

The Secure Electronic Transaction (SET) standard for electronic payment secu- 
rity extends this digital wallet approach. In this method, software encrypts a digital 
envelope of digital certificates specifying the payment details for each transaction. 
VISA, MasterCard, IBM, Microsoft, Netscape, and most other industry players have 
agreed to SET. Therefore, a system like SET may become the standard for secure 
electronic payments on the Internet. See Figure 8.7. 
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SECTION II 


e-Commerce Trends 


Business-to- 
Consumer 
e-Commerce 


e-Commerce Applications 
and Issues 


E-commerce is here to stay. The Web and e-commerce are key industry drivers. It’s 
changed how many companies do business. It’s created new channels for our customers. 
Companies are at the e-commerce crossroads and there are many ways to go. 


‘Thus, e-commerce is changing how companies do business both internally and exter- 
nally with their customers, suppliers, and other business partners. As managers con- 
front a variety of e-commerce alternatives, the way companies apply e-commerce to 
their businesses is also subject to change. The applications of e-commerce by many 
companies have gone through several major stages as e-commerce matures in the 
world of business. For example, e-commerce between businesses and consumers (B2C) 
moved from merely offering multimedia company information at corporate Web sites 
(brochureware) to offering products and services at Web storefront sites via electronic 
catalogs and online sales transactions. B2B e-commerce, in contrast, started with Web 
site support to help business customers serve themselves, and then moved toward au- 
tomating intranet and extranet procurement systems. 

Read the Real World Case below. We can learn a lot from this example about the 
challenges and opportunities faced by companies attempting to conduct online mar- 
keting campaigns. See Figure 8.8. 


Figure 8.9 illustrates some of the trends taking place in the e-commerce applications 
that we introduced at the beginning of this section. Notice how B2C e-commerce 
moves from simple Web storefronts to interactive marketing capabilities that provide 
a personalized shopping experience for customers, and then toward a totally integrated 
Web store that supports a variety of customer shopping experiences. B2C e-commerce 
is also moving toward a self-service model in which customers configure and custom- 
ize the products and services they wish to buy, aided by configuration software and 
online customer support as needed. 

B2B e-commerce participants moved quickly from self-service on the Web to con- 
figuration and customization capabilities and extranets connecting trading partners. 
As B2C e-commerce moves toward full-service and wide-selection retail Web portals, 
B2B is also trending toward the use of e-commerce portals that provide catalog, ex- 
change, and auction markets for business customers within or across industries. Of 
course, both of these trends are enabled by e-business capabilities like customer rela- 
tionship management and supply chain management, which are the hallmarks of the 
customer-focused and internetworked supply chains of a fully e-business—enabled 
company. 


E-commerce applications that focus on the consumer share an important goal: to attract 
potential buyers, transact goods and services, and build customer loyalty through individ- 
ual courteous treatment and engaging community features. 


What does it take to create a successful B2C e-commerce business venture? 
That’s the question that many are asking in the wake of the failures of many pure 
B2C dot-com companies. One obvious answer would be to create a Web business 
initiative that offers attractive products or services of great customer value, with a 
business plan based on realistic forecasts of profitability within the first year or two 
of operation—a condition that was lacking in many failed dot-coms. Such failures, 
however, have not stemmed the tide of millions of businesses, both large and small, 
that are moving at least part of their business to the Web. So let’s take a look at 


REAL WORLD 


CASE 


avid Hahn has spotted a trend. As director of ad- 

vertising for the popular online business network- 

ing site LinkedIn, he’s being asked pointed 
questions by large advertisers about his ability to help them 
find “influentials’—those people within the LinkedIn com- 
munity who are the most likely to go out and spread the 
word about a particular product or experience. “Some of 
them are requesting it specifically, while others are more 
implying it, but it comes down to the same thing,” Hahn 
says. “Marketers are very interested in the value of online 
social networks, and how leaders in those networks can be 
used to drive proactive behaviors in the population.” 

Hahn isn’t alone in his observations. 

“The notion of the online influencer is quite the thing 
today in the marketing world,” says Janet Edan-Harris, CEO 
of Umbria, which monitors chatter in cyberspace communi- 
ties for corporations wanting to know what’s being discussed 
online about their brands and products. “Companies are in- 
credibly eager to get to those people. Do that—or so the con- 
ventional wisdom says—and you'll be in marketing heaven.” 

But new research, as well as growing business experience, 
suggests that such thinking may be overly simplistic. The 
effectiveness of using online word-of-mouth campaigns—or 
using individuals rather than traditional media advertising to 
spread the word about products or—is increasingly viewed as 
an effective way to reach consumers. 

But the popular notion that frequently accompanies this, 
that there are special individuals who hold the key to the 
hearts of entire online communities, is coming under fire. 

Dave Balter certainly thinks so. As CEO of BzzAgent, a 
word-of-mouth marketing firm, Balter three years ago had a 
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underlying trends that are critical to marketers. 
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Linkedin, Umbria, Mattel, 
and Others: Driving the 
“Buzz” on the Web 


revelation: The so-called “influentials,” or opinion leaders, in 
online communities can’t be influenced in a way that acceler- 
ates the success of a word-of-mouth campaign. “We actually 
believed in the idea that influentials drove market trends at 
that point,” says Balter. “But upon closer look, we found out 
it didn’t add up. The sales data of our campaigns didn’t match 
the profiles of the opinion leaders we had targeted, and it re- 
ally caused us to re-evaluate some of our core assumptions.” 
Today, when a client comes in with the goal of influencing 
the influentials, “we tell them that’s fools’ gold,” says Balter. 

“It sounds really great, it sounds really sexy, but the 
results simply don’t fly.” 

This indeed is what Edan-Harris has concluded from 
her experiences working with online communities. “We say 
[sic], ‘Wait a minute, is this really a correct assumption, that 
there are individuals on the Internet that have that much in- 
fluence?” she says. 

Her conclusion: “Not nearly as much as everyone seems 
to think.” 

Despite this, companies are putting significant dollars 
into efforts to find these online opinion leaders, whether 
they’re bloggers, contributors to discussion boards, or mem- 
bers of online social networks. Indeed, a whole cottage in- 
dustry has sprung up based upon the notion that all marketers 
need to kick off a successful marketing strategy with a list of 
Internet opinion leaders. And with the expanding universe 
of blogs, online communities, and social networks such as 
MySpace, FaceBook, and LinkedIn, the appeal of this idea 
has become even more entrenched. ‘There’s a growing per- 
ception that the increasingly ubiquitous availability of broad- 
band coupled with the rise in popularity of blogs and online 
communities make “influentials” even more influential. 

It’s critical to understand, however, that all these propo- 
nents of opinion leaders as drivers of social and commercial 
trends aren’t talking about media stars or personalities, but 
about otherwise seemingly ordinary members of a commu- 
nity who, through accumulation of knowledge or number of 
connections with others, act as catalysts for change. Not sur- 
prisingly, marketers of all stripes almost at once began trying 
to take advantage of this—at first off-line, and now increas- 
ingly within the online social networks rising in popularity. 

“The largest companies had already established influence- 
based programs and are now extending that model into the 
online social networking space,” says Matthew Hurst, a scien- 
tist at Microsoft LiveLabs who follows online marketing 
trends. “It’s not the notion of influence that’s new, it’s the 
technology that is now enabling it to a greater degree.” Not 
surprisingly, a rapidly increasing number of companies have 
leaped into the fray to help firms identify the influentials in 
cyberspace. 

Buzzlogic is one of them. Launched in 2007, Buzzlogic 
is dedicated to this idea that opinion leaders in online social 
networks can be identified, and their influence measured. 

An early Buzzlogic beta customer is Protuo.com, a Web- 
based career management portfolio service that provides 
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matchmaking between employers and potential employees. 
Not having the funds to buy expensive marketing spots in 
TV, radio, or mainstream print media, Jennifer Gerlach, VP 
of marketing, hired Buzzlogic to find the people who are the 
most influential in the human resource/employee profes- 
sional space, contact them, and get them to buzz about the 
product. “We noticed that once one blogger wrote about our 
service, then suddenly a bunch of other people were writing 
about it. All at once, there were reviewers everywhere,” says 
Gerlach, who just snagged a major feature in Inc. that she 
attributes to the online “influentials” campaign. She says she 
can map increases in site traffic precisely to blog mentions, 
and views the campaign as a huge success. 

But despite this apparent triumph, a steadily growing 
number of online marketing experts would argue that rather 
than being responsible for the deluge of publicity that Pro- 
tuo.com is experiencing, the bloggers targeted by Buzzlogic 
were simply tapping into a sort of zeitgeist waiting to 
happen—in this case, intense interest in how the Internet could 
be used to bring employers and candidates together more 
efficiently than traditional job boards are capable of doing. 

Indeed, a growing school of thought is that “influentials” 
aren’t so much leading trends as acting as mouthpieces for 
underlying social movements that are either already in 
progress or lying fallow waiting to be triggered. Thus suc- 
cessful marketing doesn’t depend so much on finding influ- 
ential people and seeding them with ideas so much as doing 
the kind of research that exposes embryo trends, and then 
helping “influentials” discover them. 

This in fact is what Umbria does by focusing on tracking 
online conversations taking place in discussion boards and 
social networks as well as blogs. “It’s much more important 
to identify those themes that are gaining momentum than 
try to find opinion leaders,” says Edan-Harris. “You want to 
ride the wave rather than trying to start one on your own.” 
By listening first to the conversations and being nimble 
enough to use the Internet to craft campaigns that jump on 
an existing trend, “you get much better results than attempt- 
ing to generate your own little epicenter,” she says. 

Protuo.com’s Gerlach agreed with some aspects of that. 
“There has to be a story around your product, and that story 


CASE STUDY QUESTIONS 


1. How can companies benefit from the “cultural assess- 
ments” regularly performed by Mattel? How could the 
information obtained be used to create business value 
for those organizations? Provide multiple examples. 


2. The case notes that, in spite of disconfirming evidence 
as to the effectiveness of targeting online opinion lead- 
ers, companies are nonetheless increasing their efforts 
to identify and contact them. Why do you think this is 
the case? 


3. One of the participants in the case states that “you want 
to ride the wave rather than trying to start one of your 
own.” What does she mean by that? If companies are not 
starting these “waves,” where are they coming from? 


has to resonate in the world for the opinion leader strategy 
to work,” she says. 

Herein lies the problem with swallowing the ‘influen- 
tials’ theory whole cloth. Much of the so-called evidence of 
how the process works is a matter of reverse engineering. 
Once something happens—if there’s a best-selling book 
coming out of nowhere, or a surprise political upset—you 
can always go back to the beginning and find the event or 
person that seems to have triggered it. You can always tell a 
causal story in retrospect. 

Michael Shore, VP of worldwide consumer insights for 
Mattel, directs an organization that increasingly monitors 
blogs, social networks, discussion boards, and forums to fig- 
ure out what the market might want from toys in general 
and Mattel products in particular. But unlike many other 
global consumer-brands companies, Mattel isn’t interested 
in simply smoking out those individuals who are inordinately 
influential in their online communities and pushing top- 
down marketing messages onto them. 

Despite the fact that this has become the strategy du 
jour in the online world, Shore’s philosophy is a more 
holistic one. 

“We’re not just interested in opinion leaders. We'd con- 
sider that too narrow a focus,” says Shore, who hired Mar- 
ketTools.com to help him develop and get involved with 
online communities. Instead, he uses the online universe to 
do what he calls “cultural assessments” that involve analyz- 
ing language, behavioral patterns, and values. Armed with 
that information, Shore says, Mattel gets valuable informa- 
tion from the Internet that it uses to shape future product 
development as well as marketing campaigns. 

If there’s one thing that everyone agrees on, it’s that 
marketers need to invest a great deal more effort into how 
online social networks and Internet communities actually 
work with respect to selling products and services at the 
grassroots level. 

“It’s an emerging medium, and the rules haven’t yet been 
established,” says Umbria’s Edan-Harris. “We’re still learn- 
ing what does and doesn’t work.” 


Source: Adapted from Alice LaPlante, “Online Influencers: How The New 
Opinion Leaders Drive Buzz on the Web,” InformationWeek, May 5, 2007. 


REAL WORLD ACTIVITIES 


1. A number of technological and cultural developments 
in recent years has resulted in the emergence of exten- 
sive social networks and a large number of avidly fol- 
lowed blogs. Go online to research how companies are 
tapping into these trends and what new marketing prac- 
tices have arisen as a result. Prepare a report to summa- 
rize your findings. 


2. Reflect on your own purchasing behavior. How much 
do you rely on blogs, feedbacks, and recommendations 
from past customers to make your own purchase deci- 
sions? Why do you (or not) rely on these sources of in- 
formation? Do you believe they are largely unbiased? 
Break into small groups to discuss these issues with 
your classmates and compare perspectives on them. 
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FIGURE 8.9 Trends in B2C and B2B e-commerce, and the business strategies and value driving these trends. 
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Source: Adapted from Jonathan Rosenoer, Douglas Armstrong, and J. Russell Gates, The Clickable Corporation: Successful Strategies for Capturing the Internet 
Advantage (New York: The Free Press, 1999), p. 24. 


some essential success factors and Web site capabilities for companies engaged in 
either B2C or B2B e-commerce. Figure 8.10 provides examples of a few top-rated 
retail Web companies. 


e-Commerce Success On the Internet, the barriers of time, distance, and form are broken down, and businesses 

Factors are able to transact the sale of goods and services 24 hours a day, 7 days a week, 365 days 
a year with consumers all over the world. In certain cases, it is even possible to convert a 
physical good (CDs, packaged software, a newspaper) to a virtual good (MP3 audio, 
downloadable software, information in HTML format). 


A basic fact of Internet retailing is that all retail Web sites are created equal as far as 
the “location, location, location” imperative of success in retailing is concerned. No 
site is any closer to its Web customers, and competitors offering similar goods and 
services may be only a mouse click away. This scenario makes it vital that businesses 
find ways to build customer satisfaction, loyalty, and relationships so that customers 
keep coming back to their Web stores. Thus, the key to e-tail (retail business con- 
ducted online) success is to optimize several key factors such as selection and value, 
performance and service efficiency, the look and feel of the site, advertising and incen- 
tives to purchase, personal attention, community relationships, and security and reli- 
ability. Lets briefly examine each of these factors that are essential to the success of a 
B2C Web business. See Figure 8.11. 


Selection and Value. Obviously, a business must offer Web shoppers a good selection 
of attractive products and services at competitive prices, or the shoppers will quickly 


328 © Module IIT / Business Applications 


Top Retail Web Sites 


FIGURE 8.10 


Examples of a few top-rated 
retail Web sites. 


FIGURE 8.11 


Some of the key factors for 
success in e-commerce. 


Amazon.com $14.8B Web sales volume www.amazon.com 

Amazon.com is the exception to the rule that consumers prefer to shop “real world” 
retailers online. The mother of all shopping sites, Amazon features a vast selection of 
books, videos, DVDs, CDs, toys, kitchen items, electronics, and even home and garden 
goods sold to millions of loyal customers. 


Staples, Inc. $5.6B Web sales volume = www.staples.com 

Staples tops the “Big 3” office supply giants in terms of Internet sales, although Office 
Depot and OfficeMax are also members of the top 10 retail Web sites list. Consumers can 
access the entire catalog online and can have their purchases delivered to their home or 
office within 24 hours and often within the same business day. 


Apple, Inc. $2.7B Web sales volume | www.apple.com 

Apple created a boutique atmosphere in their brick and mortar outlets and have 
successfully recreated that same feel in their online store. Literally every Apple 
product can be viewed, sampled, and configured online and then shipped directly 
to the consumer. 


Sears  $2.6B Web sales volume www.sears.com 

The Internet has become a transforming force for Sears and their Web sales have in- 
creased every year since they first launched their Web site in 1999. ‘Today, customers can 
order any product online and can have their purchase delivered directly to their home or 
business with applicable freight charges or can pick up their purchase at their local Sears 
store with no additional shipping charges. 


click away from a Web store. However, a company’s prices don’t have to be the lowest 
on the Web if it builds a reputation for high quality, guaranteed satisfaction, and top 
customer support while shopping and after the sale. For example, top-rated e-tailer 
REI.com helps you select quality outdoor gear for hiking and other activities with a 
“How to Choose” section and gives a money-back guarantee on your purchases. 


Performance and Service. People don’t want to be kept waiting when browsing, 
selecting, or paying in a Web store. A site must be efficiently designed for ease of 


e-Commerce Success Factors 


e Selection and Value. Attractive product selections, competitive prices, satisfaction 
guarantees, and customer support after the sale. 

e Performance and Service. Fast, easy navigation, shopping, and purchasing, and 
prompt shipping and delivery. 

© Look and Feel. Attractive Web storefront, Web site shopping areas, multimedia 
product catalog pages, and shopping features. 

e Advertising and Incentives. Targeted Web page advertising and e-mail promotions, 
discounts, and special offers, including advertising at affiliate sites. 

e Personal Attention. Personal Web pages, personalized product recommendations, 
Web advertising and e-mail notices, and interactive support for all customers. 

e Community Relationships. Virtual communities of customers, suppliers, company 
representatives, and others via newsgroups, chat rooms, and links to related sites. 

e Security and Reliability. Security of customer information and Web site transactions, 
trustworthy product information, and reliable order fulfillment. 

© Great Customer Communication. Easy-to-find contact information, online order 
status, product support specialists. 
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access, shopping, and buying, with sufficient server power and network capacity to 
support Web site traffic. Web shopping and customer service must also be friendly 
and helpful, as well as quick and easy. In addition, products offered should be available 
in inventory for prompt shipment to the customer. 


Look and Feel. B2C sites can offer customers an attractive Web storefront, shopping 
areas, and multimedia product catalogs. These could range from an exciting shopping 
experience with audio, video, and moving graphics to a more simple and comfortable 
look and feel. Thus, most retail e-commerce sites let customers browse product sec- 
tions, select products, drop them into a virtual shopping cart, and go to a virtual 
checkout station when they are ready to pay for their order. 


Advertising and Incentives. Some Web stores may advertise in traditional media, 
but most advertise on the Web with targeted and personalized banner ads and other 
Web page and e-mail promotions. Most B2C sites also offer shoppers incentives to 
buy and return. Typically, these incentives mean coupons, discounts, special offers, 
and vouchers for other Web services, sometimes with other e-tailers at cross-linked 
Web sites. Many Web stores also increase their market reach by being part of Web ban- 
ner advertising exchange programs with thousands of other Web retailers. Figure 8.12 
compares major marketing communications choices in traditional and e-commerce 
marketing to support each step of the buying process. 


Personal Attention. Personalizing your shopping experience encourages you to buy 
and make return visits. Thus, e-commerce software can automatically record details of 
your visits and build user profiles of you and other Web shoppers. Many sites also 
encourage you to register with them and fill out a personal interest profile. Then, 
whenever you return, you are welcomed by name or with a personal Web page, greeted 
with special offers, and guided to those parts of the site in which you are most inter- 
ested. This one-to-one marketing and relationship building power is one of the major 
advantages of personalized Web retailing. 


Community Relationships. Giving online customers with special interests a feeling 
of belonging to a unique group of like-minded individuals helps build customer loy- 
alty and value. Thus, Web site relationship and affinity marketing programs build and 
promote virtual communities of customers, suppliers, company representatives, and 
others via a variety of Web-based collaboration tools. Examples include discussion 
forums or newsgroups, chat rooms, message board systems, and cross-links to related 
Web site communities. 


Security and Reliability. As a customer of a successful Web store, you must feel 
confident that your credit card, personal information, and details of your transactions 
are secure from unauthorized use. You must also feel that you are dealing with a 


FIGURE 8.12 How traditional and Web marketing communications differ in supporting each step of the 


buying process. 


Buya Process | antenos [> Coss) | rete [=> eran [=>] toa 


Traditional m Television ads m Television ads m Niche magazines am Point-of-sale m Product 
Market m General interest m General interest m Collateral promotions experience 
Communications magazines magazines m Direct marketing m Buyers’ clubs 
Web m Buttons m Banners m Microsites m Daily specials m e-Mail alerts 
Market m Banners m Brochureware m Sweepstakes m Newsletters 
Communications m Sponsorships m Web site m First-time order 


incentives 
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trustworthy business whose products and other Web site information you can trust to 
be as advertised. Having your orders filled and shipped as you requested, in the time 
frame promised, and with good customer support are other measures of an e-tailer’s 


reliability. 


Great Customer Communications. As more consumers shift their habits from the 
traditional bricks and mortar approach to an online shopping experience, one thing 
becomes even more important than ever: the need for constant and informative com- 
munication channels with the customer. Despite the conveniences associated with on- 
line shopping, consumers still have questions that need to be answered by a human 
being. Issues ranging from product information to order status or modification are 
often still handled the “old fashioned way.” Land’s End, the famous outdoor clothing 
retailer, provides telephone and chat space access to customer representatives that will 
even help you pick out your purchases in real time. 


Amazon.com has just launched an application on Facebook that enables members of 
the social network to buy gifts for each other based on wish lists registered with the 
online retailer. Amazon Giver also provides Facebook members with the option of 
viewing suggested items for friends based on interests listed on their profile pages. A 
second Facebook application, Amazon Grapevine, provides a news feed of friends’ 
activity on Amazon, such as when they update their wish lists, write reviews, or tag 
products. Both applications only share information between Facebook members who 
have opted in to the service. 

“By combining Amazon’s vast selection of products with Facebook’s millions of 
users, we are able to make activities like giftgiving more efficient and rewarding for 
Facebook users,” says Eva Manolis, VP of Amazon. 

By adding the Amazon Giver application to their profile, Facebook members get 
the option of clicking directly to a secure Amazon checkout page. If the recipient has 
a wish list, then Amazon can ship the item without the buyer entering a shipping ad- 
dress, which would already be on file. In order for people to view a wish list, it would 
have to be set as “public.” With Amazon Grapevine, people have the option to choose 
what type of activity they would be willing to share with friends through the news 
feed. Activity updates are entirely opt-in. 

Amazon.com has also introduced a new way for online merchants to leverage 
Amazon’s infrastructure to ship physical products. “The Amazon Fulfillment Web 
Service (Amazon FWS) allows merchants to tap in to Amazon’s network of fulfill- 
ment centers and our expertise in logistics,” says Amazon Web Services evangelist 
Jeff Barr. “Merchants can store their own products to our fulfillment centers and 
then, using a simple Web service interface, fulfill orders for the products.” 

Amazon FWS is designed to complement Fulfillment By Amazon (FBA), the ful- 
fillment service Amazon has offered since 2006, by making the fulfillment process 
accessible programmatically. Amazon also maintains a separate fulfillment program 
called Amazon Advantage, which allows content publishers to send Amazon music, 
books, and videos for sale on consignment, with a 55 percent fee. 

The idea, Barr explains, is to be able to ship a product with a simple Web service 
call. By making it possible for merchants to further automate their e-commerce and 
fulfillment efforts, Amazon is demonstrating its commitment to selling “muck,” as 
CEO Jeff Bezos has referred to his company’s e-commerce infrastructure. 


Source: Adapted from Antone Gonsalves, “Amazon.com Launches Shopping Apps on Facebook,” InformationWeek, 
March 13, 2008; and Thomas Claburn, “Amazon Introduces Fulfillment Web Service,” InformationWeek, March 20, 2008. 
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Most business-to-consumer e-commerce ventures take the form of retail business sites 
on the World Wide Web. Whether a huge retail Web portal like Amazon.com or a 
small specialty Web retailer, the primary focus of such e-tailers is to develop, operate, 
and manage their Web sites so they become high-priority destinations for consumers 
who will repeatedly choose to go there to buy products and services. Thus, these Web 
sites must be able to demonstrate the key factors for e-commerce success that we have 
just covered. In this section, let’s discuss the essential Web store requirements that you 
would have to implement to support a successful retail business on the Web, as sum- 
marized and illustrated in Figure 8.13. 


Before you can launch your own retail store on the Internet, you must build an e- 
commerce Web site. Many companies use simple Web site design software tools and 
predesigned templates provided by their Web site hosting service to construct their 
Web retail store. That includes building your Web storefront and product catalog 
Web pages, as well as tools to provide shopping cart features, process orders, handle 
credit card payments, and so forth. Of course, larger companies can use their own 
software developers or hire an outside Web site development contractor to build a 
custom-designed e-commerce site. Also, like most companies, you can contract with 
your ISP (Internet service provider) or a specialized Web hosting company to operate 
and maintain your B2C Web site. 

Once you build your Web site, it must be developed as a retail Web business by 
marketing it in a variety of ways that attract visitors to your site and transform them 
into loyal Web customers. So, your Web site should include Web page and e-mail 
advertising and promotions for Web visitors and customers, as well as Web advertising 


FIGURE 8.13 To develop a successful e-commerce business, these Web store requirements must be implemented by a 
company or its Web site hosting service. 


e Build 
Web site design tools 
Site design templates 
Custom design services 


Web site hosting 
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e Serve e Transact e Support 
Personalized Web pages Flexible order process Web site online help 
Dynamic multimedia catalog Credit card processing Customer service e-mail 
Catalog search engine Shipping and tax calculations Discussion groups and chat rooms 
Integrated shopping cart E-mail order notifications Links to related sites 
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e Manage © Operate e Protect 
Web site usage statistics 24X7 Web site hosting User password protection 
Sales and inventory reports Online tech support Encrypted order processing 
Customer account management Scalable network capacity Encrypted Web site administration 


Links to accounting system Redundant servers and power Network firewalls and security monitors 


Developing a Web Store 
© Market 
Web page advertising 
E-mail promotions 
Web advertising exchanges with affiliate sites 


Search engine registrations and optimization 
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exchange programs with other Web stores. Also, you can register your Web business 
with its own domain name (e.g., yourstore.com), as well as registering your Web site 
with the major Web search engines and directories to help Web surfers find your site 
more easily. In addition, you might consider affiliating as a small business partner with 
large Web portals like Yahoo! and Netscape, large e-tailers and auction sites like 
Amazon and eBay, and small business e-commerce portals like Microsofts Small 
Business Center. 


A new market for writing has arisen online, and it’s targeted at search engines. Con- 
tent optimized for successful search results ranges from informative articles to inco- 
herent copy stuffed with keywords, a plague that’s been labeled search-engine spam. 
Popular keywords generate significant traffic for Web sites with related content, giv- 
ing Web site owners a financial incentive to host content that ranks near the top of 
search results. As traffic rises, ad revenue tends to follow, often through ad-delivery 
services for Web sites like Google’s AdSense. 

A cottage industry has formed to help people tailor content for search engines, 
such as rewriting copy by substituting synonyms for certain words so that text can be 
repurposed to score well on search engines. The rephrased text looks different to a 
search engine, contributing to the host site’s rank and traffic. Google’s Webmaster 
Guidelines warns against the practice of crafting copy for its search engine: “Make 
pages for users, not for search engines.” But that hasn’t stopped many from trying. 

Creating content for search engines is one aspect of what’s called “search-engine 
optimization” or SEO, part of a broader business known as “search-engine market- 
ing,” or SEM. In sufficient quantity, and absent sufficient quality, SEO content is a 
form of spam that’s aimed at search engines rather than people. And like product- 
oriented spam, it’s controversial. 

Chris Winfield, president and cofounder of SEM company 10e20 LLC, says one 
of the biggest problems for Google, MSN, and Yahoo is search-engine spam. “That 
spam consists of pages that are created for the search engines or pages that otherwise 
trick the end user,” he says. Ani Kortikar, CEO of SEM company Netramind Tech- 
nologies Pvt. Ltd., says that while search engines may require businesses to employ 
certain tactics to show up in search results, the tactics should be used to support 
good content rather than simply to drive traffic. 

But just as legitimate e-mail marketers have felt the backlash against spammers, 
well-intentioned search-engine marketers—and search engines as well—may suffer if 
the tricksters continue to thrive. Says Winfield of 10e20, “One of the most important 
things for any search engine is people having confidence and becoming repeat users.” 


Source: Adapted from Thomas Claburn, “The Spamming of Web Search,” InformationWeek, April 1, 2005. 


Just because your Web store has been launched does not mean customers will come 
flocking to your cyber front door. Your Web store needs to be discovered by your 
customers and this means getting listed in the popular search engines. 

You can submit your Web site to search engines such as Yahoo, Google, Live, and 
others and each will begin looking at your Web pages and listing you when appropri- 
ate search terms are entered. Waiting for your site to show up competitively ranked 
with all the other similar site could take weeks and even months. There is a science to 
search engine ranking and it is an essential element in Web store success. 

Search engine optimation (SEO) is considered a subset of search engine market- 
ing, and focuses on improving the number and/or quality of visitors to a Web site 
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over “natural” (aka “organic” or “algorithmic” search engine) listings. The term SEO 
can also refer to “search engine optimizers,” an industry of consultants who carry out 
optimization projects on behalf of clients. 

Search engines display different kinds of listings on a results page, including paid 
advertising in the form of pay-per-click (PPC) advertisements and paid inclusion list- 
ings, as well as unpaid organic search results and keywords specific listings, such as 
news stories, definitions, map locations, and images. As an Internet marketing strat- 
egy, SEO considers how search engines work and what people search for. 

Optimizing a Web site primarily involves editing its content and HTML coding to 
both increase its relevance to specific keywords and to remove barriers to the indexing 
activities of search engines. Because SEO requires making changes to the source code 
of a site, it is often most effective when incorporated into the initial development and 
design of a site, leading to the use of the term “search engine friendly” to describe 
designs, menus, content management systems, and shopping carts that can be opti- 
mized easily and effectively. 

A range of strategies and techniques are employed in SEO, including changes to 
a site’s code (referred to as “on page factors”) and getting links from other sites 
(referred to as “off page factors”). These techniques include two broad categories: 
techniques that search engines recommend as part of good design, and those tech- 
niques that search engines do not approve of and attempt to minimize the effect of, 
referred to as spamdexing. Methods such as /ink farms, where a group of Web sites 
is set up such that all hyperlink to every other Web site in the group, and keyword 
stuffing, where a Web page is loaded with keywords in the meta tags or in content, 
are examples of techniques considered “black hat” SEO. Such techniques serve only 
to degrade both the relevance of search results and the user experience of search 
engines. 

SEO, as a marketing strategy, can often generate a good return. However, as the 
search engines are not paid for the traffic they send from organic search, the algo- 
rithms used can and do change, and there are many problems that can cause Search 
Engine problems when crawling or ranking a site’s pages, there are no guarantees of 
success, either in the short or long term. Due to this lack of guarantees and certainty, 
SEO is often compared to traditional public relations (PR), with PPC advertising 
closer to traditional advertising. 


Once your retail store is on the Web and receiving visitors, the Web site must help you 
welcome and serve them personally and efficiently so that they become loyal custom- 
ers. So most e-tailers use several Web site tools to create user profiles, customer files, 
and personal Web pages and promotions that help them develop a one-to-one rela- 
tionship with their customers. This effort includes creating incentives to encourage 
visitors to register, developing Web cookie files to identify returning visitors automati- 
cally, or contracting with Web site tracking companies like DoubleClick and others 
for software to record and analyze the details of the Web site behavior and preferences 
of Web shoppers automatically. 

Of course, your Web site should have the look and feel of an attractive, friendly, 
and efficient Web store. That means having e-commerce features like a dynamically 
changing and updated multimedia catalog, a fast catalog search engine, and a conven- 
ient shopping cart system that is integrated with Web shopping, promotions, pay- 
ment, shipping, and customer account information. Your e-commerce order processing 
software should be fast and able to adjust to personalized promotions and customer 
options like gift handling, special discounts, credit card or other payments, and ship- 
ping and tax alternatives. Also, automatically sending your customers e-mail notices to 
document when orders are processed and shipped is a top customer service feature of 
e-tail transaction processing. 

Providing customer support for your Web store is an essential Web site capability. 
Thus, many e-tail sites offer help menus, tutorials, and lists of FAQs (frequently asked 
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questions) to provide self-help features for Web shoppers. Of course, e-mail corre- 
spondence with customer service representatives of your Web store offers more per- 
sonal assistance to customers. Establishing Web site discussion groups and chat rooms 
for your customers and store personnel to interact helps create a more personal com- 
munity that can provide invaluable support to customers, as well as build customer 
loyalty. Providing links to related Web sites from your Web store can help customers 
find additional information and resources, as well as earning commission income from 
the affiliate marketing programs of other Web retailers. For example, the Amazon. 
com affiliate program pays commissions of up to 15 percent for purchases made by 
Web shoppers clicking to its Web store from your site. 


A Web retail store must be managed as both a business and a Web site, and most 
e-commerce hosting companies offer software and services to help you do just that. 
For example, companies like FreeMerchant, Prodigy Biz, and Verio provide their 
hosting clients with a variety of management reports that record and analyze Web 
store traffic, inventory, and sales results. Other services build customer lists for e-mail 
and Web page promotions or provide customer relationship management features 
to help retain Web customers. Also, some e-commerce software includes links to 
download inventory and sales data into accounting packages like QuickBooks for 
bookkeeping and preparation of financial statements and reports. 

Of course, Web-hosting companies must enable their Web store clients to be avail- 
able online 24 hours a day and seven days a week all year. This availability requires 
them to build or contract for sufficient network capacity to handle peak Web traffic 
loads and redundant network servers and power sources to respond to system or power 
failures. Most hosting companies provide e-commerce software that uses passwords 
and encryption to protect Web store transactions and customer records, as well as to 
employ network firewalls and security monitors to repel hacker attacks and other 
security threats. Many hosting services also offer their clients 24-hour tech support 
to help them with any technical problems that arise. We will discuss these and other 
e-commerce security management issues in Chapter 11. 


You see it, you want it, you buy it. That’s what e-commerce sites are banking on each 
holiday shopping season. Having blocked and tackled basics such as shopping carts 
and credit card approvals, online retailers know a significant chunk of their future 
sales will be in the up-sell and cross-sell—impulse buys, in other words. Yet striking 
a shopper’s fancy is harder to do electronically than in the physical world of sounds, 
smells, and ambiance. 

E-mail marketing as well as on-screen suggestions, pop-up boxes, and live chat 
are the most common ways of sparking shoppers to buy more than they anticipated, 
but not all retailers handle these tools well. Shipping promotions are always a grab- 
ber. Sixty-one percent of those polled by Forrester Research said they are more likely 
to shop with an online retailer that offers free shipping. 

Another too frequent mistake is making too many product offers as soon as shop- 
pers land on the site, says Jared Spool, CEO of User Interface Engineering, an on- 
line consulting firm in Bradford, Massachusetts. Macys.com does this. If you search 
for “men’s jeans,” you will find 422 items, dozens and dozens of which are not men’s 
jeans. “You have to work really hard to get to products you're interested in. They’re 
always thrusting things at you,” Spool says. “It’s department-store thinking,” he says. 
“They think of their Web site as a Sunday flier.” 

Instead, e-commerce sites should offer suggestions after a shopper has placed 
items in the cart. That’s a “seducible moment”—after the shopper has found what 
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she wants and before she’s checked out, he says. Then suggest a sweater for the skirt, 
a picture frame along with the locket. Landsend.com does this with pop-ups, while 
Anntaylorloft.com runs clickable images down the right-hand side of the screen. 
Either way works, says Spool. 

If you’ve ever shopped online, your inbox is getting filled now because e-mail is 
the most cost-effective and successful tool for customer retention, according to For- 
rester. Seventy-three percent of retailers send e-mails about new products to custom- 
ers. Still, for e-commerce companies, e-mail come-ons can be more effective than 
the direct mailings the U.S. Postal Service delivers. Although response rates to paper 
mailings are 2 percent or 3 percent, response rates for e-mail pitches can range from 
5 percent to 30 percent, Spool says. In part that’s because the mail goes to interested 
people who have, presumably, opted in or at least didn’t opt out for them. The 
attitude among marketers is, “Hey, it’s not spam if you sign up for it!” 


Source: Adapted from Kim Nash, “Online Shopping: How to Get the Impulse Purchase,” CIO Magazine, 
November 16, 2007. 


Business-to-business e-commerce is the wholesale and supply side of the commercial 
process, where businesses buy, sell, or trade with other businesses. B2B e-commerce 
relies on many different information technologies, most of which are implemented at 
e-commerce Web sites on the World Wide Web and corporate intranets and extranets. 
B2B applications include electronic catalog systems, electronic trading systems such as 
exchange and auction portals, electronic data interchange, electronic funds transfers, 
and so on. All of the factors for building a successful retail Web site that we discussed 
previously also apply to wholesale Web sites for business-to-business e-commerce. 

In addition, many businesses are integrating their Web-based e-commerce systems 
with their e-business systems for supply chain management, customer relationship 
management, and online transaction processing, as well as with their traditional, or 
legacy, computer-based accounting and business information systems. This integra- 
tion ensures that all e-commerce activities are integrated with e-business processes 
and supported by up-to-date corporate inventory and other databases, which in turn 
are automatically updated by Web sales activities. 


‘Trading of Wireless Spectrum Online marketplaces like Craigslist and Freecycle al- 
low consumers to make low-cost sales—or even exchange goods for free—through 
sophisticated technological systems that make such transactions efficient. 

Some companies are attempting to apply a similar model to online business-to- 
business marketplaces. 

‘The FCC holds auctions to grant licenses for radio spectrums, and most of these 
are used by cell phone carriers, or for first responders and their communication gear. 
But some of these spectrums aren’t being used for a variety of reasons. 

Spectrum Bridge’s Web site, SpecEx.com, aims to create a secondary market for 
these unused spectrum. The company says the site can provide an easy and effective 
way to connect buyers and sellers. The market could potentially be large, as public- 
safety agencies, and major wireless carriers like Verizon Wireless and AT&T rou- 
tinely purchase spectrum on the secondary market. The cable companies could also 
become potential buyers, especially as some are eyeing the wireless voice space. 
Spectrum Bridge makes money by taking a percentage of the transaction. 

All transfers of spectrum would have to be approved by the FCC, but the agency 
has been supportive of spectrum trading in the past. 

‘The idea of organizing the secondary spectrum market isn’t a new one, but previ- 
ous attempts have not been successful because they couldn’t get enough buyers and 
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sellers. “The spectrum world is almost tribal,” says Peter Stanforth, chief technology 
officer for Spectrum Bridge. “It consists of small groups of people who know each 
other—and do everything manually.” That is not an efficient system for smaller 
parcels—SpecEx’s sweet spot. “By automating a lot of functions and bringing in a 
wider audience of buyers and sellers, we are making these smaller pieces more liquid 
and valuable,” explains Stanforth. 

Rick Rotondo, chief marketing officer of Spectrum Bridge, compares the SpecEx 
service to Craigslist, a favorite site for consumer bargains. With its launch several 
years ago, Craigslist made the sale of small consumer items efficient, which is what 
SpecEx aims to do with respect to the sale of wireless spectrum parcels. “Let’s say 
you had used sunglasses you wanted to sell, for maybe $25. Before online classifieds 
were introduced, it would not have been cost-efficient to try to sell them to a huge 
audience in a paper, because the ad probably would have cost you $20.” Same thing 
with wireless spectrum, he says. “Transaction costs are eating up most of the value 
for small buyers and sellers.” 

E-commerce technology can standardize much of the process, notes Stanforth. 
“What we are trying to do is be the eBay of the wireless spectrum world—a one-stop 
shop where companies can go to monetize excess or idle spectrum, and spectrum 
seekers can go to find reasonably priced unused spectrums.” 


Source: Adapted from Erika Morphy, “The Corporate Bargain Hunters’ Quest for a Business Model,” E-Commerce 
Times, January 20, 2009; and Marin Perez, “Spectrum Bridge Launches Online Secondary Market,” InformationWeek, 
September 5, 2008. 


The latest e-commerce transaction systems are scaled and customized to allow buyers and sell- 
ers to meet in a variety of high-speed trading platforms: auctions, catalogs, and exchanges. 


Businesses of any size can now buy everything from chemicals to electronic 
components, excess electrical energy, construction materials, or paper products at 
business-to-business e-commerce marketplaces. Figure 8.14 outlines five major types 
of e-commerce marketplaces used by businesses today. However, many B2B portals 
provide several types of marketplaces. Thus, they may offer an electronic catalog 
shopping and ordering site for products from many suppliers in an industry. Or they 
may serve as an exchange for buying and selling via a bid-ask process or at negotiated 
prices. Very popular are electronic auction Web sites for B2B auctions of products and 
services. Figure 8.15 illustrates a B2B trading system that offers exchange, auction, 
and reverse auction (where sellers bid for the business of a buyer) electronic markets. 


e-Commerce Marketplaces 


© One to Many. Sell-side marketplaces. Host one major supplier, who dictates product 
catalog offerings and prices. Examples: Cisco.com and Dell.com. 


e Many to One. Buy-side marketplaces. Attract many suppliers that flock to these 
exchanges to bid on the business of a major buyer like GE or AT&T. 


e Some to Many. Distribution marketplaces. Unite major suppliers who combine their 
product catalogs to attract a larger audience of buyers. Examples: VerticalNet and 
Works.com. 


e Many to Some. Procurement marketplaces. Unite major buyers who combine their 
purchasing catalogs to attract more suppliers and thus more competition and lower 
prices. Examples: the auto industry. 


e Many to Many. Auction marketplaces used by many buyers and sellers that can create 
a variety of buyers’ or eBay and FreeMarkets. 


FIGURE 8.15 


An example of a B2B e- 
commerce Web portal that 
offers exchange, auction, 


and reverse auction 
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Many of these B2B e-commerce portals are developed and hosted by third-party 
market-maker companies who serve as infomediaries that bring buyers and sellers to- 
gether in catalog, exchange, and auction markets. Infomediaries are companies that 
serve as intermediaries in e-business and e-commerce transactions. Examples are 
Ariba, Commerce One, and VerticalNet, to name a few successful companies. All pro- 
vide e-commerce marketplace software products and services to power business Web 
portals for e-commerce transactions. 

These B2B e-commerce sites make business purchasing decisions faster, simpler, 
and more cost-effective because companies can use Web systems to research and trans- 
act with many vendors. Business buyers get one-stop shopping and accurate purchasing 
information. They also get impartial advice from infomediaries that they can’t get from 
the sites hosted by suppliers and distributors. Thus, companies can negotiate or bid for 
better prices from a larger pool of vendors. Of course, suppliers benefit from easy access 
to customers from all over the globe. Now, let’s look at a real world example. 


Public B2B Exchanges. The pricing was becoming cutthroat in the closing minutes 
of the online auction. A North American chemical producer offered to sell a plastics 
stabilizer to a Fortune 20 firm for $4.35 per kilogram. With two minutes left, how- 
ever, a lower price from a Chinese company flashed across the computer screens at 
ChemConnect (www.chemconnect.com), the San Francisco operator of a public on- 
line marketplace for the chemical industry. The North American producer lowered 
its price. Back and forth the two firms went as ChemConnect officials saw the price 
drop penny by penny. The Chinese offered $4.23. Finally, the North American com- 
pany won the $500,000 contract with an offer of $4.20. The auction was just one of 
20 taking place on ChemConnect’s Web site one August morning, as companies 
from North America, Europe, and Asia bid on the lucrative six-month contracts. 

ChemConnect hosted the event during several hours on a recent Monday morn- 
ing. The same bidding process without the online auction would have taken at least 
three months, according to the company that held the event—even using e-mail. In 
the past, this company sent e-mails to all the suppliers it wanted to bid on its busi- 
ness. Then, in a few days, those companies would respond with their opening bids. 
The buyer would counter. Up to a week elapsed between every round. 
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Not only does ChemConnect help save companies time when they’re buying, but 
it offers a central hub in a fragmented industry. More than 89,000 companies around 
the world produce chemicals, according to the American Chemical Council. Chem- 
Connect, housed on one floor of a San Francisco high-rise, allows many of them to 
find suppliers or buyers they did not know existed. 

Private B2B Exchanges. Heritage Environmental Services President Ken Price 
agreed to enter two B2B Web public auctions, hosted by FreeMarkets (now owned 
by Ariba), to bid on contracts in 2001. Yet Heritage did not win. Not only that, the 
online auction process emphasized price, which meant that Heritage had to lower its 
fees to compete. 

Heritage managers quickly concluded that this flavor of Net commerce wasn’t 
for them. Instead, they decided on a different strategy: building their own online 
portal to link Heritage with existing customers. Heritage’s B2B Web-based exchange 
lets customers order hazardous-waste management services and keep tabs on their 
accounts. It also speeds up the billing process because it accepts payment for services 
online. “What we’ve got is a nice central focal point where everyone in the process 
can see what's going on,” says Price, who expects his company to book up to 15 per- 
cent of its business this year through the private portal. 

Heritage is at the forefront of business-to-business e-commerce: private ex- 
changes. This form of online link appeals to a growing number of large and small 
companies disappointed by public Internet markets intended to facilitate auctions 
and group purchasing. Like Heritage, many suppliers have been unhappy with the 
downward price pressures they encounter in public Internet markets. 

Businesses concerned that participating in public B2B exchanges would put sales 
information and other critical data in the hands of customers and competitors are 
also turning to private exchanges. Smaller companies such as Heritage, as well as gi- 
ants like Dell Computer, Intel, and Wal-Mart, have set up private online exchanges 
to link to suppliers and customers, help streamline the business, and boost sales. Pri- 
vate exchanges offer more control, say executives at these companies, and permit 
easier customization—allowing automation of processes, such as sending purchase 
orders or checking delivery schedules. 


Source: Adapted from Eric Young, “Web Marketplaces That Really Work,” Fortune/CNET Tech Review, Winter 2002. 


Companies are recognizing that success will go to those who can execute clicks-and-mortar 
strategies that bridge the physical and virtual worlds. Different companies will need to 
follow very different paths when deciding how closely—or loosely—to integrate their 
Internet initiatives with their traditional operations. 


Figure 8.16 illustrates the spectrum of alternatives and benefit trade-offs that 
e-business enterprises face when choosing an e-commerce clicks-and-bricks strat- 
egy. E-business managers must answer this question: Should we integrate our e- 
commerce virtual business operations with our traditional physical business 
operations or keep them separate? As Figure 8.16 shows, companies have imple- 
mented a range of integration/separation strategies and made key benefit trade-offs 
in answering that question. Let’s take a look at several alternatives. 


The Internet is just another channel that gets plugged into the business architecture. 


So says CIO Bill Seltzer of the office supply retailer Office Depot, which fully 
integrates its OfficeDepot.com e-commerce sales channel into its traditional business 
operations. Thus, Office Depot is a prime example of why many companies have cho- 
sen integrated clicks-and-bricks strategies, where their e-commerce business is inte- 
grated in some major ways into the traditional business operations of a company. The 
business case for such strategies rests on: 
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FIGURE 8.16 Companies have a spectrum of alternatives and benefit trade-offs when deciding on an integrated 
or separate e-commerce business. 
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e Capitalizing on any unique strategic capabilities that may exist in a company’s tradi- 
tional business operations that could be used to support an e-commerce business. 

e Gaining several strategic benefits of integrating e-commerce into a company’s tra- 
ditional business, such as sharing established brands and key business information, 
joint buying power, and distribution efficiencies. 


For example, Office Depot already had a successful catalog sales business with a 
professional call center and a fleet of over 2,000 delivery trucks. Its 1,825 stores and 
30 warehouses were networked by a sophisticated information system that provided 
complete customer, vendor, order, and product inventory data in real time. 
These business resources made an invaluable foundation for coordinating Office 
Depot’s e-commerce activities and customer services with its catalog business and 
physical stores. Thus, customers can shop at OfficeDepot.com at their home or busi- 
ness or at in-store kiosks. Then they can choose to pick up their purchases at the 
stores or have them delivered. In addition, the integration of Web-enabled e-commerce 
applications within Office Depot’s traditional store and catalog operations has helped 
increase the traffic at their physical stores and improved the catalog operation’s 
productivity and average order size. 


Borders.com has always been run by Amazon.com. It features Amazon’s inventory, 
site content, fulfillment, and customer service capabilities. The sales even belong to 
Amazon, with a percentage going to Borders. The new Borders site marks a major 
juncture in Borders’ business and e-commerce strategy and the end of what will be a 
seven-year relationship with Amazon.com at a time when the Ann Arbor, Michigan- 
based bookseller is in the midst of a turnaround. 

In 2001, when the retailing rivals inked this deal to develop a cobranded Web site, 
it was mutually beneficial. Amazon.com, which had gone public in 1997, was under 
pressure to turn its first profit. Extending the e-commerce infrastructure into which it 
had invested millions of dollars to third parties such as Borders injected much-needed 
cash into Amazon.com’s business. Borders, which like many traditional brick-and- 
mortar stores at the time, was struggling to make the e-commerce game work for 
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Other Clicks-and- 
Bricks Strategies 


them, got a tried and tested, user-friendly e-commerce site powered by a company 
that consumers trusted. Never mind the fact that Amazon was a competitor. 

“The relationship with Amazon.com allowed us at the time to focus on our brick- 
and-mortar stores while still having an online channel that was branded Borders,” 
says Anne Roman, a spokeswoman for Borders. She notes that the company had its 
own e-commerce site before it partnered with Amazon but that the costs associated 
with operating and marketing it outweighed the revenue it generated at the time. 

Roman says the existing relationship with Amazon doesn’t allow Borders to do all 
the things it wants to do to move forward to create a more integrated, cross-channel 
experience for customers, such as give Borders’ customers access to author readings 
and concerts at the company’s flagship store in Ann Arbor via online video. Borders 
also wants customers to be able to earn points toward the Borders Rewards loyalty 
program when they shop online. Currently, customers can’t earn points when they 
use the cobranded site because it exists as a separate silo of Borders’s business. “Once 
we launch the proprietary site, that loyalty program will be fully integrated into it,” 
says Roman. 

However, Borders has to give customers a compelling reason to buy books, mov- 
ies, and music from Borders.com instead of Amazon.com. That’s not going to be 
easy when Amazon.com has customer loyalty locked up and is so competitive on 
pricing. Gartner Research analyst Adam Sarner notes that the Web influences 40 
percent of commerce in the off-line world. If Borders can take advantage of that 
dynamic, he adds, they’ll be better able to compete with Amazon. “If their site can 
become a lead management tool that gets more people to visit the store and pick up 
more books or visit three times instead of two, that might be a better model for 
them,” says Sarner. “Borders has the benefit of the physical stores. That’s where they 
can differentiate themselves from Amazon.” 


Source: Adapted from Meridith Levinson, “Borders Tries to Open New Chapter with Web Site Relaunch Separate 
from Amazon.com,” CIO Magazine, October 2, 2007. 


As Figure 8.16 illustrates, other clicks-and-bricks strategies range from partial 
e-commerce integration using joint ventures and strategic partnerships to complete 
separation via the spin-off of an independent e-commerce company. 

For example, KBtoys.com is an e-commerce joint venture of KB Online Holdings 
LLC, created by toy retailer KB Toys, and BrainPlay.com, formerly an e-tailer of chil- 
dren’s products. The company is 80 percent owned by KB ‘Toys but has independent 
management teams and separate distribution systems. However, KBtoys.com has suc- 
cessfully capitalized on the shared brand name and buying power of KB Toys, as well 
as the ability of its customers to return purchases to over 1,300 KB Toys stores, which 
also heavily promote the e-commerce site. 

The strategic partnership of the Rite Aid retail drugstore chain and Drugstore. 
com is a good example of a less integrated e-commerce venture. Rite Aid only owns 
about 25 percent of Drugstore.com, which has an independent management team and 
a separate business brand. However, both companies share the decreased costs and 
increased revenue benefits of joint buying power, an integrated distribution center, 
cobranded pharmacy products, and joint prescription fulfillment at Rite Aid stores. 

Finally, let’s look at an example of the benefits and challenges of a completely 
separate clicks-and-bricks strategy. Barnesandnoble.com was created as an independ- 
ent e-commerce company that was spun off by the Barnes & Noble book retail chain. 
This status enabled it to gain several hundred million dollars in venture capital 
funding, create an entrepreneurial culture, attract quality management, maintain a 
high degree of business flexibility, and accelerate decision making. However, the book 
e-retailer has done poorly since its founding and failed to gain market share from 
Amazon.com, its leading competitor. Many business analysts say that the failure of 
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A Checklist for Channel Development 


1. What audiences are we attempting to reach? 


2. What action do we want those audiences to take? To learn about us, to give us informa- 
tion about themselves, to make an inquiry, to buy something from our site, to buy 
something through another channel? 


Who owns the e-commerce channel within the organization? 
Is the e-commerce channel planned alongside other channels? 
Do we have a process for generating, approving, releasing, and withdrawing content? 


Will our brands translate to the new channel or will they require modification? 


SO a 


How will we market the channel itself? 


Barnes & Noble to integrate some of the marketing and operations of Barnesandnoble. 
com within their thousands of bookstores meant it forfeited a key strategic business 
opportunity. 


Some of the key questions that the management of companies must answer in making 
a clicks-and-bricks decision and developing the resulting e-commerce channel are 
outlined in Figure 8.17. An e-commerce channel is the marketing or sales channel cre- 
ated by a company to conduct and manage its chosen e-commerce activities. How this 
e-commerce channel is integrated with a company’s traditional sales channels (e.g., 
retail/wholesale outlets, catalog sales, and direct sales) is a major consideration in 
developing its e-commerce strategy. 

Thus, the examples in this section emphasize that there is no universal clicks-and- 
bricks e-commerce strategy or e-commerce channel choice for every company, indus- 
try, or type of business. Both e-commerce integration and separation have major 
business benefits and shortcomings. Deciding on a clicks-and-bricks strategy and 
e-commerce channel depends heavily on whether a company’s unique business opera- 
tions provide strategic capabilities and resources to support a profitable business model 
successfully for its e-commerce channel. As these examples show, most companies are 
implementing some measure of clicks-and-bricks integration because “the benefits of 
integration are almost always too great to abandon entirely.” 


When outdoor equipment retailer REI wanted to boost in-store sales, the company 
looked to its Web site. In June 2003, REI.com launched free in-store pickup for cus- 
tomers who ordered online. ‘The logic behind that thinking: People who visit stores 
to collect their online purchases might be swayed to spend more money upon seeing 
the colorful displays of clothing, climbing gear, bikes, and camping equipment. 

RET’ hunch paid off. “One out of every three people who buy something online 
will spend an additional $90 in the store when they come to pick something up,” says 
Joan Broughton, RET’s vice president of multichannel programs. That tendency 
translates into a healthy 1 percent increase in store sales. 

As Broughton sees it, the mantra for any multichannel retailer should be “a sale 
is a sale is a sale, whether online, in stores or through catalogs.” The Web is simply 
not an isolated channel with its own operational metrics or exclusive group of 
customers. 

As the Web has matured as a retail channel, consumers have turned to online 
shopping as an additional place to interact with a retailer rather than a replacement 
for existing channels such as stores or catalogs. 

And to make that strategy as cost-efficient as possible, the company uses the same 
trucks that restock its stores to fulfill online orders slated for in-store pickup. To 
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make this work, REI had to integrate order information from the Web site and re- 
plenishment orders from stores at its distribution warehouse in Washington state. 

In and of itself, integrating the two types of order information wasn’t complex, 
says Brad Brown, REI’s vice president of information services. What was difficult, 
however, was coordinating fulfillment of both online and replenishment orders 
because “orders placed on the Web by customers are nothing like replenishment 
orders that stores place,” he says. Online orders are picked from the warehouse at 
the time of the order and then put in a queue until the appropriate truck is loaded, 
whereas store orders are picked by an automated replenishment system that typi- 
cally picks orders at one time based on either a weekly or biweekly replenishment 
schedule. 

‘To make in-store pickup a reality, Brown’s group wrote a “promise algorithm” 
that informs customers of a delivery date when they place an online order. ‘Timing 
can get tricky when orders are placed the day before a truck is scheduled to depart 
the warehouse with a store-replenishment delivery. For example, if an online order is 
placed on a Monday night and a truck is scheduled to depart Tuesday morning, the 
system promises the customer a pickup date of a week later, as if the order would be 
placed on the following week’s truck. However, REI will shoot for fulfilling the order 
that night; if it can do it, REI (and, ultimately, the customer) is happy because the 
order arrives sooner than was promised. 

Creating effective business-to-consumer retail Web sites entails more than sim- 
ply calculating sales figures. It’s about delivering the functionality that users expect 
and using the site to drive sales through other channels. And only IT integration can 
make this happen. 


Source: Adapted from Megan Santosus, “Channel Integration—How REI Scaled e-Commerce Mountain,” CIO 
Magazine, May 15, 2004. 


p e-Commerce. E-commer ce pncoMmpasses the ere on- e B2C e-Commerce. Businesses typically sell products 
line Process of developing, marketing, selling, deliver- and services to consumers at e-commerce Web sites 
ing, servicing, and paying for products and services. The that provide attractive Web pages, multimedia catalogs, 


Internet and related technologies and e-commerce Web 


l l interactive order processing, secure electronic payment 
sites on the World Wide Web and corporate intranets 


systems, and online customer support. However, suc- 


and extranets serve as the business and technology plat- cessful e-tailers build customer satisfaction and loyalty 
forms for OOS marketplaces for consumers and by optimizing factors outlined in Figure 8.11, such as 
businesses in the basic categories of business-to-consumer selection and value, performance and service efficiency, 


(B2C), business-to-business (B2B), and consumer-to- 


1 the look and feel of the site, advertising and incentives 
consumer (C2C) e-commerce. The essential process- 


to purchase, personal attention, community relation- 


es that should be implemented in all e-commerce ships, and security and reliability. In addition, a Web 
applications—access control and security, personalizing store has several key business requirements, including 
and profiling, search management, content manage- building and marketing a Web business, serving and 
ment, catalog management, payment systems, workflow supporting customers, and managing a Web store, as 


management, event notification, and collaboration and 


summarized in Figure 8.13. 
trading—are summarized in Figure 8.4. 


e B2B e-Commerce. Business-to-business applications 

e e-Commerce Issues. Many e-business enterprises are of e-commerce involve electronic catalog, exchange, and 
moving toward offering full-service B2C and B2B auction marketplaces that use Internet, intranet, and 
e-commerce portals supported by integrated customer- extranet Web sites and portals to unite buyers and sell- 
focused processes and internetworked supply chains, as ers, as summarized in Figure 8.14 and illustrated in Fig- 
illustrated in Figure 8.9. In addition, companies must ure 8.15. Many B2B e-commerce portals are developed 
evaluate a variety of e-commerce integration or separa- and operated for a variety of industries by third-party 
tion alternatives and benefit trade-offs when choosing a market-maker companies called infomediaries, which 


clicks-and-bricks strategy and e-commerce channel, as may represent consortiums of major corporations. 
summarized in Figures 8.16 and 8.17. 
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Key Terms and Concepts 


These are the key terms and concepts of this chapter. The page number of their first explanation is in parentheses. 


1. Clicks-and-bricks strategy (338) b. 
2. E-commerce channel (341) 


3. E-commerce marketplaces (336) d. Electronic payment 


Collaboration and trading (321) Sa 
c. Content and catalog 


management (318) 


Electronic commerce (312) 
a. Business-to-business (B2B) (316) 
b. Business-to-consumer (B2C) (316) 
c. Consumer-to-consumer 


a. Auction (336) systems (322) (C2C) (316) 
b. Catalog (336) e. Event notification (321) f 
c. Exchange (336) Ë Proflingand 6. o funds transfer 
d. Portal (334) personalizing (318) ( ) 622) 
4. E-commerce processes (317) g Search management (318) 7: Intomediaries.(437) 
b. Workflow management (320) 8. Search engine optimization (332) 


a. Access control and security (318) 


Review Quiz q 


Match one of the key terms and concepts listed previously with each of the brief examples or definitions that follow. Try to 
find the best fit for the answers that seem to fit more than one term or concept. Defend your choices. 


1. The online process of developing, marketing, sell- 
ing, delivering, servicing, and paying for products 
and services. 


2. Business selling to consumers at retail Web stores 


is an example. 


3. Using an e-commerce portal for auctions by busi- 


ness customers and their suppliers is an example. 


4. Using an e-commerce Web site for auctions 


among consumers is an example. 


5. E-commerce applications must implement several 


major categories of interrelated processes, such as 
search and catalog management, in order to be 
effective. 


6. Helps to establish mutual trust between you and 


an e-tailer at an e-commerce site. 


7. Tracks your Web site behavior to provide you with 


an individualized Web store experience. 


8. Develops, generates, delivers, and updates infor- 


mation to you at a Web site. 


9. Ensures that proper e-commerce transactions, de- 


cisions, and activities are performed to serve you 
more efficiently. 


10. Sends you an e-mail when your e-commerce order 


has been shipped. 


—— 11. Includes matchmaking, negotiation, and mediation 


processes among buyers and sellers. 


Discussion Questions 


1. Most businesses should engage in e-commerce on the 
Internet. Do you agree or disagree with this statement? 
Explain your position. 


. Companies that serve as intermediaries in 


e-commerce transactions. 


. A process aimed at improving the volume and/or 


quality of traffic to a Web site. 


. An e-commerce marketplace that may provide 


catalog, exchange, or auction service for businesses 
or consumers. 


. Buyers bidding for the business of a seller. 
. Marketplace for bid (buy) and ask (sell) transactions. 
. The most widely used type of marketplace in B2C 


e-commerce. 


. The marketing or sales channel created by a company 


to conduct and manage its e-commerce activities. 


. The processing of money and credit transfers 


between businesses and financial institutions. 


. Ways to provide efficient, convenient, and secure 


payments in e-commerce. 


. Companies can evaluate and choose from several 


e-commerce integration alternatives. 


. Web sites and portals hosted by individual 


companies, consortiums, or intermediaries that 
bring together buyers and sellers to accomplish 
e-commerce transactions. 


. Acomponent of e-commerce sites that helps 


customers find what they are looking for. 


2. Are you interested in investing in, owning, managing, 
or working for a business that is primarily engaged in 
e-commerce on the Internet? Explain your position. 
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3. Refer to the Real World Case on KitchenAid and the 


Royal Bank of Canada in the chapter. What recent uses 
of the Internet may these companies be overlooking in 
their quest to protect the equity of their brands? About 
those that you identified, what strategies would be ade- 
quate to face them? 


4. Why do you think there have been so many business 


failures among “dot-com” companies that were devoted 
only to retail e-commerce? 


. Do the e-commerce success factors listed in Figure 8.11 
guarantee success for an e-commerce business venture? 
Give a few examples of what else could go wrong and 
how you would confront such challenges. 


. If personalizing a customer’s Web site experience is a 
key success factor, then electronic profiling processes 
to track visitor Web site behavior are necessary. Do 


you agree or disagree with this statement? Explain 
your position. 


. All corporate procurement should be accomplished in 


e-commerce auction marketplaces, instead of using B2B 
Web sites that feature fixed-price catalogs or negotiated 
prices. Explain your position on this proposal. 


. Refer to the Real World Case on Linkedln, Umbria, 


Mattel and Others in the chapter. What is your take on 
the debate as to whether these ‘influential’ individuals 
do really have an effect on others, or they are represen- 
tative of an underlying cultural trend? How would a 
company react based on their position on the issue? 


. If you were starting an e-commerce Web store, which of 


the business requirements summarized in Figure 8.13 
would you primarily do yourself, and which would you out- 
source to a Web development or hosting company? Why? 


Analysis Exercises E 


Complete the following exercises as individual or group projects that apply chapter concepts to real-world business situations. 


1. Small Business e-Commerce Portals lines established by Prodigy Biz (www.prodigybiz.com) 


On the Internet, small businesses have become big 
business, and a really big business, Microsoft, wants a 
piece of the action. The company’s Small Business Cen- 
ter (www.microsoft.com/smallbusiness) is one of many 
sites offering advice and services for small businesses 
moving online. Most features, whether free or paid, are 
what you’d expect: lots of links and information along the 


or Entrabase.com. Small Business Center, however, 
stands out for its affordable advertising and marketing 
services. See Figure 8.18. 

One program helps businesses create banner ads 
and places them on a collection of Web sites that it 
claims are visited by 60 percent of the Web surfing 
community. With its “Banner Network Ads” program, 
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buyers don’t pay a huge fee upfront, and they don’t run 
the risk that a huge number of visitors will unexpectedly 
drive up clickthrough commissions. Instead, this pro- 
gram allows small business to pay a small, fixed fee for a 
guaranteed number of clickthroughs (people who click 
on your banner ad to visit your Web site). Small Busi- 
ness Center rotates these banner ads around a network 
of participating Web sites and removes the ad as soon as 
it has received the guaranteed number of clickthrough 
visitors. This action eliminates the guesswork regarding 
both traffic and fees. The three packages—100, 250, 
and 1,000 visitors—break down to 50 cents per visitor. 


a. Check out Small Business Center and the other 
e-commerce portals mentioned. Identify several 
benefits and limitations for a business using these 
Web sites. 

b. Which Web site is your favorite? Why? 

c. Which site would you recommend or use to help 
a small business wanting to get into e-commerce? 


Why? 


. e-Commerce Web Sites for Car Buying 

Nowadays new car buyers can configure the car of their 
dreams on Microsoft’s MSN Autos Web site, as well as 
those of Ford, GM, and other auto giants. Many indepen- 
dent online car purchase and research companies offer 
similar services. See Figure 8.19. Car buying information 
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provided by manufacturers, brokerage sites, car dealers, 
financial institutions, and consumer advocate Web sites 
has exploded in the past few years. 

Yet in the age of the Internet, the auto industry 
remains a steadfast holdout to innovations that might 
threaten the well-established and well-connected sup- 
ply chain, the car dealership. American new car buy- 
ers simply cannot skip the middleperson and purchase 
an automobile directly from the manufacturer. That’s 
not just a business decision by the manufacturers; 
that’s the law. 

Even so, many car buyers use the Internet as a place 
to research their purchases. Instead of selling new cars 
directly, Web sites such as Autobytel.com of Irvine, 
California, just put consumers in touch with a local 
dealer where they test-drive a vehicle and negotiate a 
price. Autobytel.com has been referring buyers to new 
and used car dealers since 1995. It also offers online 
financing and insurance. 

Online car-buying sites on the Web make 
consumers less dependent on what cars a dealer has 
on the lot. At online sites, buyers can customize a 
car—or van, truck, or sport utility vehicle—by select- 
ing trim, paint, color, and other options before 
purchase. They can also use Web sites such as 
CarBuying lips.com to help prepare for the final 
negotiating process. 


FIGURE 8.19 Top Car-Buying Web Sites 
Table for Problem 2. 

e Autobytel.com www.autobytel.com 
Enter make and model, and a local dealer will contact you with a price offer. Home 
delivery is an option. 

e AutoNation www.autonation.com 
Every make and model available, as well as financing and insurance information, home 
delivery, and test drives. 

e Microsoft MSN Autos www.autos.msn.com 
Auto reviews, detailed vehicle specifications, safety ratings, and buying services for new 
and used cars, including customizing your very own Ford. 

© cars.com www.cars.com 
Research tools include automotive reviews, model reports, dealer locators, and financing 
information. 

e CarsDirect.com www.carsdirect.com 
Research price and design, and then order your car. CarsDirect will deliver it to your 
home. A top-rated site. 

e Edmunds.com www.edmunds.com 
For an objective opinion, Edmunds.com provides reviews, safety updates, and rebate 
news for car buyers. 

e FordVehicles.com www.fordvehicles.com 
Research, configure, price, and order your new Ford car, minivan, truck, or SUV at 
this Web site. 

e GM BuyPower www.gmbuypower.com 
With access to nearly 6,000 GM dealerships, car shoppers can get a price quote, 
schedule a test drive, and buy. 
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a. Check out several of the Web sites shown in 
Figure 8.19. Evaluate them based on ease of use, 
relevance of information provided, and other 
criteria you feel are important. Don’t forget the 
classic: “Did they make you want to buy?” 


b. Which sites would you use or recommend if you or 


a friend actually wanted to buy a car? Why? 
c. Check out the Consumer Federation of America’s 
study on anticompetitive new car-buying state laws 


or similar studies online. How much does it estimate 


consumers would save if they could purchase cars 
directly from manufacturers online? 


3. Comparing e-Commerce Sites 
In this exercise, you will experiment with electronic 
shopping and compare alternative e-commerce sites. 
First, select a category of product widely available on 
the Web, such as books, CDs, or toys. Second, select 


five specific products to price on the Internet, for exam- 


ple, five specific CDs you might be interested in buy- 
ing. Third, search three prominent e-commerce sites 


selling this type of product and record the price charged 


for each product by each site. 


a. Using a spreadsheet, record a set of information 
similar to that shown for each product. (Categories 
describing the product will vary depending on the 
type of product you select—CDs might require the 


title of the CD and the performer[s], whereas toys or 


similar products would require the name of the 
product and its description.) See Figure 8.20. 


b. For each product, rank each company on the basis 


of the price charged. Give a rating of 1 for the 
lowest price and 3 for the highest, and split the 
ratings for ties—two sites tying for the lowest 
price would each receive a 1.5. If a site does not 
have one of the products available for sale, give 


that site a rating of 4 for that product. Add the rat- 


ings across your products to produce an overall 
price/availability rating for each site. 


FIGURE 8.20 Table for Problem 3. 


c. Based on your experience with these sites, rate them 
on their ease of use, completeness of information, 
and order-filling and shipping options. As in Part (b), 
give a rating of 1 to the site you feel is best in each 
category, a 2 to the second best, and a 3 to the 
poorest site. 

d. Prepare a set of PowerPoint slides or similar pre- 
sentation materials summarizing the key results and 
including an overall assessment of the sites you 
compared. 


. e-Commerce: The Dark Side 


Anonymous transactions on the Internet can have a 
dark side. Research each of the terms below on the 
Web. Prepare a one-page report for each term re- 
searched. Your paper should describe the problem and 
provide examples and illustrations where possible. 
Conclude each paper with recommendations on how 
to guard against each type of fraud. 


a. Search using the terms “Ponzi Scheme” or “Pyramid 
Scheme.” To find current examples in action, try 
searching for “plasma TV $50,” “cash matrix,” 
“e-books” and “matrix,” or “gifting” through a 
search engine or action site. 

b. Search using the terms “phishing” and “identity.” If 
possible, include a printout of a real-world example 
that you or an acquaintance may have received via 
e-mail. 

c. Search using the term “third-party escrow.” What le- 
gitimate function does this serve? Provide an example 
of a legitimate third-party escrow service for Internet 
transactions. How has the third-party escrow system 
been used to commit fraud on the Internet? 

d. Prepare a one-page paper describing a type of online 
fraud not covered in the previous questions. Prepare 
presentation materials and present your findings to 
the class. Be sure to include a description of the 
fraud, how to detect it, and how to avoid it. Use 
real-world illustrations if possible. 


Price Rating 
Title of Book Author Site A Site B Site C A B C 
The Return of Little Big Man Berger, T. 15.00 16.95 14.50 2 3 1 
Learning Perl/Tk Walsh, N. & Mui, L. 26.36 25.95 25.95 3 BS 115) 
Business at the Speed of Thought Gates, W. 21.00 DDN 21.00 1165) 3 1.5 
Murders for the Holidays Smith, G. 8.25 125 4 2 1 
Designs for Dullards Jones 7S 18.50 18.50 1 Dos PAS 


Sum of ratings (low score represents 
most favorable rating) 


WES 12 15 


REAL WORLD 


Chapter 8 / e-Commerce Systems @ 347 


Entellium, Digg, Peerflix, Zappos, 


and Jigsaw: Success for Second 
Movers in e-Commerce 


nyone who has watched short-track speed skating 
during the Winter Olympics knows that skating 
with the lead is no easy task. 

The No. 2 skater gets to conserve precious energy by 
drafting behind the leader. No. 2 watches the frontrunner’s 
every move, gauging when and where to make a bid for the 
gold. Now corporate America and speed skating have much 
in common. 

There are no safe leads. 

For companies that use the Internet as the home base for 
their businesses, the second-mover advantage seems even 
more substantial. That’s why Paul Johnston is deeply grate- 
ful to Marc Benioff. 

Johnston’s Seattle-based start-up, Entellium, has won 
hundreds of contracts against Benioff’s Salesforce.com and 
other competitors since it moved from Malaysia in 2004, and 
its revenues grew fivefold in 2005. What Johnston really 
likes, though, is not having to sell companies on the concept 
of letting an outsider host their customer relationship man- 
agement software. 

What makes fast-following the hot strategy of the mo- 
ment is the relative ease with which founders can get a start- 
up out on the track and send it chasing the competition. 
Cheap open-source tools can help you deploy new business 
software quickly. 

Offshore manufacturers can quickly churn out anything 
from semiconductors to engine parts. The Web connects 
marketers to a vast pool of beta testers, while angel inves- 
tors and venture capitalists, flush with new funds, stand at 
the ready. 

Of course, fast-following isn’t as simple as saying “Me 
too.” To battle established leaders, you need the right 
product and strategy, as well as a big dose of savvy. Here’s 
how to show up after the starting gun and still come out 
on top. 


Number 1: Be better, faster, cheaper, easier 


To steal business from Benioff, Johnston knew that Entel- 
lium had to offer something different. “This is true for any 
follower,” he says. 

It’s what Johnston calls the “awesome, awesome, not 
totally ****-ed up” approach. The first “awesome” is how 
Entellium’s software works. Johnston, formerly an Apple 
sales exec, aims to bring to the stodgy world of enterprise 
software the ease of use of consumer-directed offerings 
like Google Maps and the role-playing game Everquest. 
He even hired developers from the gaming industry to 
borrow interface tricks. 

After appealing to customers on usability, Johnston hits 
them with the price: about 40 percent less than the competi- 
tion. That’s the second “awesome.” The last part is making 
Entellium a less risky decision. 


Who wants to put their job on the line for a start-up the 
boss has never heard of? Johnston offers free 24X7 service 
to make it easier for new customers to stick their necks out. 


Number 2: Trip up incumbents with tactics 
from other fields 


Common wisdom would say that the last thing the world 
needs is another technology news Web site, but Digg founders 
Jay Adelson and Kevin Rose are uncommonly wise. 

A year ago, inspired by social-networking sites like 
MySpace—whose users rank everything from people to 
music—Adelson and Rose decided to use the same approach 
to build a better version of tech news site Slashdot. 

Digg lets readers submit news stories and vote for the 
ones they think are most important. The top 15 vote-getters 
make it to the front page. The formula is working. Between 
May and November, the number of monthly unique visitors 
to Digg surged 284 percent to 404,000, eclipsing Slashdot’s 
367,000, according to ComScore Media Metrix. In addition, 
Adelson and Rose recently landed $2.8 million from inves- 
tors, including eBay founder Pierre Omidyar and Netscape 
cofounder Marc Andreessen. 

Moving forward, Adelson and Rose won’t be shy about 
borrowing even more from seemingly unrelated companies. 
Soon they’ll start tracking what members read and offering 
story recommendations à la Amazon. Digg is also set to branch 
out into nontechnology stories, which readers will be able to 
categorize with Delicious-style social bookmarking tags. 

“A lot of companies are afraid to touch their original 
technology, to reconsider the premise on which they started 
the business,” Adelson notes. “But when you stop doing that, 
that’s when you get lapped [overtaken].” 


Number 3: Swipe their business models and 
start your own race 


When Billy McNair and Danny Robinson were hatching the 
idea for anew DVD company, Netflix handed them part of 
their business plan. Consumers had already learned that 
renting by mail was easy. McNair and Robinson believed 
they could do better than rentals. After all, eBay had shown 
them how. 

By mixing together the best of two worlds, the founders 
came up with Peerflix, a Web site on which people exchange 
DVDs for a 99-cent transaction fee. Like eBay, Peerflix sits 
in the middle, linking movie fans and taking a piece of the 
action. Eager to avoid going head-to-head with eBay, how- 
ever, McNair and Robinson are starting with lower-ticket 
items—those that sell for less than $25—for which auctions 
may not be worth the hassle. 

“We’ve married the best of online rental services and 
online secondary markets,” McNair claims. Since it launched 
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in September, Peerflix has helped trade nearly 200,000 
DVDs, and the founders are now talking about extending 
the idea to video games and other items. 


Number 4: Follow the biggest leader 
you can find 


When he hatched Zappos six years ago, Nick Swinmum put 
other online shoe sellers in his cross-hairs. Web-based com- 
petitors typically carried a limited number of brands and ca- 
tered to small niches—say, women’s dress shoes or men’s 
outdoor boots. Zappos would crush them, Swinmum rea- 
soned, with an online store that offered every conceivable 
make and model. 

That was the right idea, but it focused on the wrong 
competitors. The online shoe market was so tiny that even if 
Zappos dominated it, there wouldn’t be enough business for 
the company to thrive. To grow, it had to steal customers 
from bricks-and-mortar stores. Before 2001, Zappos didn’t 
carry inventory; rather, the company asked distributors to 
“drop-ship” directly to consumers. 

It was an easy, cheap arrangement, but the problem was 
that Zappos couldn’t guarantee service; 8 percent of the time 
customers tried to buy shoes, the desired pair was out of 
stock. In other words, the experience was nothing like walk- 
ing into a shoe store. “We realized then who our real com- 
petition was, and that we had to find a way to make an 
inventory model work,” Swinmum says. 

So Zappos began to cozy up to suppliers. 

Contrary to industry practice, Swinmum shared data 
with manufacturers on exactly how well their shoes were 
selling. “Traditionally the vendor-retail relationship was 
adversarial,” he recognizes. “We thought, ‘Instead of trying 
to hide this information from the brands, let’s open every- 


CASE STUDY QUESTIONS 


1. Is the second-mover advantage always a good business 
strategy? Defend your answer with examples of the 
companies in this case. 


2. What can a front-runner business do to foil the assaults 
of second movers? Defend your answer using the exam- 
ples of the front-runner companies in the case. 


3. Do second movers always have the advantage in Web- 
based business success? Why or why not? Evaluate the 
five strategies given in the case and the companies that 
used them to help defend your answer. 


thing up. They can help us build the business.’” Did they 
ever! Grateful shoe reps helped Zappos craft promotions to 
spur sales. 

Since targeting traditional shoe stores, Zappos has 
thrived. In 2001, the company did $8.6 million in sales; the 
next year it did $32 million. In 2005, Zappos posted more 
than $300 million in revenues from an expanding line of 
shoes, handbags, and other leather goods. 


Number 5: Aim for the leader’s Achilles’ heel 


When he was VP for sales at online marketing shop Digital 
Impact, Jim Fowler watched his field reps fail with a growing 
sense of frustration. Their problem? The leading online 
databases of corporate information, such as Dun & Bradstreet 
subsidiary Hoover’s, didn’t offer the deep, up-to-date con- 
tact lists that salespeople need to close deals. 

Rather than complain about those vendors, Fowler de- 
cided to improve on them. 

His company, Jigsaw, is a new kind of contact subscrip- 
tion service: All of the names and addresses in Jigsaw’s 
database come from its users. Sales reps pay a minimum of 
$25 per month to access contacts at thousands of compa- 
nies, or they pay nothing if they contribute 25 contacts per 
month themselves. Users police the listings to ensure 
they’re current. 

Since Jigsaw’s launch in December 2004, its database has 
surged from 200,000 contacts to more than 2 million; some 
38,000 subscribers are adding 10,000 new contacts a day. 
Through Jigsaw you can find more than 16,000 contacts at 
Medtronic, for example; Hoover’s, meanwhile, offers exten- 
sive research on the company but only about 30 contacts. 
According to Fowler, “It’s never too late if you are smarter 
and better than everyone else.” 


REAL WORLD ACTIVITIES 


1. Use the Internet to research the current business status 
of all of the many companies in this case. Are the second 
movers still successfully using their strategies, or have 
the first movers foiled their attempts? Have new strong 
players entered the markets of the first and second 
movers, or have business, economic, or societal develop- 
ments occurred to change the nature of competition in 
these markets? 


2. Assume you will start an Internet-based business similar 
to one of those mentioned in this case or another one 
of your choice. Would you be a first, second, or later 
mover in the market you select? How would you differ- 
entiate yourself from other competitors or prospective 
new entrants? Break into small groups to share your 
ideas and attempt to agree on the best Web-based 
business opportunity of the group. 


Information 
Technologies 


DECISION SUPPORT SYSTEMS 


Section I 
Decision Support in Business 
Introduction 


Real World Case: Hillman Group, Avnet, and Quaker 
Chemical: Process Transformation through Business 
Intelligence Deployments 


Decision Support Trends 

Decision Support Systems 

Management Information Systems 
Online Analytical Processing 

Using Decision Support Systems 
Executive Information Systems 
Enterprise Portals and Decision Support 
Knowledge Management Systems 
Section II 

Artificial Intelligence Technologies in Business 
Business and AI 

An Overview of Artificial Intelligence 


Real World Case: Goodyear, JEA, OSUMC, and 
Monsanto: Cool Technologies Driving Competitive 
Advantage 


Expert Systems 
Developing Expert Systems 
Neural Networks 

Fuzzy Logic Systems 
Genetic Algorithms 

Virtual Reality 

Intelligent Agents 


Real World Case: Harrah’s Entertainment, LendingTree, 


DeepGreen Financial, and Cisco Systems: Successes and 
Challenges of Automated Decision Making 


. Identify the changes taking place in the form and 


use of decision support in business. 


. Identify the role and reporting alternatives of 


management information systems. 


. Describe how online analytical processing can 


meet key information needs of managers. 


. Explain the decision support system concept 


and how it differs from traditional management 
information systems. 


. Explain how the following information systems 


can support the information needs of executives, 
managers, and business professionals: 


a. Executive information systems 
b. Enterprise information portals 


c. Knowledge management systems 


. Identify how neural networks, fuzzy logic, genetic 


algorithms, virtual reality, and intelligent agents 
can be used in business. 


. Give examples of several ways expert systems can 


be used in business decision-making situations. 
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SECTION I 


Introduction 


Information, 
Decisions, and 
Management 


Information Quality 


Decision Support in Business 


As companies migrate toward responsive e-business models, they are investing in new 
data-driven decision support application frameworks that help them respond rapidly to 
changing market conditions and customer needs. 


‘To succeed in business today, companies need information systems that can support 
the diverse information and decision-making needs of their managers and business 
professionals. In this section, we will explore in more detail how this is accomplished by 
several types of management information, decision support, and other information sys- 
tems. We concentrate our attention on how the Internet, intranets, and other Web- 
enabled information technologies have significantly strengthened the role that 
information systems play in supporting the decision-making activities of every manager 
and knowledge worker in business. 

Read the Real World Case below. We can learn a lot from this case about the value 
of business intelligence projects. See Figure 9.1. 


Figure 9.2 emphasizes that the type of information required by decision makers in a 
company is directly related to the level of management decision making and the 
amount of structure in the decision situations they face. It is important to understand 
that the framework of the classic managerial pyramid shown in Figure 9.2 applies even 
in today’s downsized organizations and flattened or nonhierarchical organizational struc- 
tures. Levels of management decision making still exist, but their size, shape, and 
participants continue to change as today’s fluid organizational structures evolve. Thus, 
the levels of managerial decision making that must be supported by information tech- 
nology in a successful organization are: 


e Strategic Management. ‘Typically, a board of directors and an executive com- 
mittee of the CEO and top executives develop overall organizational goals, strat- 
egies, policies, and objectives as part of a strategic planning process. They also 
monitor the strategic performance of the organization and its overall direction 
in the political, economic, and competitive business environment. 


e ‘Tactical Management. Increasingly, business professionals in self-directed teams 
as well as business unit managers develop short- and medium-range plans, sched- 
ules, and budgets and specify the policies, procedures, and business objectives for 
their subunits of the company. They also allocate resources and monitor the 
performance of their organizational subunits, including departments, divisions, 
process teams, project teams, and other workgroups. 


e Operational Management. The members of self-directed teams or operating 
managers develop short-range plans such as weekly production schedules. They 
direct the use of resources and the performance of tasks according to procedures 
and within budgets and schedules they establish for the teams and other 
workgroups of the organization. 


What characteristics of information products make them valuable and useful to you? 
‘To answer this important question, we must first examine the characteristics or at- 
tributes of information quality. Information that is outdated, inaccurate, or hard to 
understand is not very meaningful, useful, or valuable to you or other business profes- 
sionals. People need information of high quality, that is, information products whose 
characteristics, attributes, or qualities make the information more valuable to them. It 
is useful to think of information as having the three dimensions of time, content, and 
form. Figure 9.3 summarizes the important attributes of information quality and 
groups them into these three dimensions. 


Hillman Group, Avnet, and Quaker 


REAL WORLD 


im Honerkamp, CIO of Hillman Group, is proud of his 

new business intelligence (BI) system. Why not? It’s 

much better than what came before. In the bad old days, 

executives looking for sales information, for example, had 
to ask one of Honerkamp’s programmers to make a manual 
database query to pull the numbers from the company’s legacy 
systems. The lag time made the charts “stale the minute they 
came out,” according to Honerkamp, whose company is a 
$380 million manufacturer and distributor of engraving tech- 
nologies and hardware, such as keys and signs. 

With Hillman Group’s new BI system, curious business 
executives can query the system themselves and get instant 
answers about such critical questions as the number of un- 
filled customer orders, which is tracked by the system in real 
time. There’s just one problem: The new system hasn’t made 
the business better—at least not yet—only better informed. 

That’s generally the problem with BI, the umbrella term 
that refers to a variety of software applications used to ana- 
lyze an organization’s raw data (e.g., sales transactions) and 
extract useful insights from them. Most CIOs still think of it 
as a reporting and decision support tool. Though the tools 
haven’t changed much recently, there is a small revolution 
going on in the ways BI tools are being deployed by some 
CIOs. Done right, BI projects can transform business 
processes—and the businesses that depend on those 
processes—into lean, mean machines. 


FIGURE 9.1 


Business intelligence tools, coupled with changes to 
business processes, can have a significant impact on 
the bottom line. 


Source: © Image Source/Corbis. 


Chemical: Process Transformation 
through Business Intelligence 
Deployments 


It isn’t easy to take BI to the next level; it requires a change 
in thinking about the value of information inside organizations 
from the CEO down. Information is power, and some people 
don’t like to share it. Yet sharing is vital to this new vision of BI 
because everyone involved in the process must have full access 
to information to be able to change the ways that they work. 

The other major impediment to using BI to transform 
business processes is that most companies don’t understand 
their business processes well enough to determine how to 
improve them. Companies also need to be careful about the 
processes they choose. If the process does not have a direct 
impact on revenue, or the business isn’t behind standardiz- 
ing the process across the company, the entire BI effort could 
disintegrate. Companies need to understand all the activities 
that make up a particular business process, how information 
and data flow across various processes, how data are passed 
between business users, and how people use it to execute 
their particular part of the process. They need to understand 
all this before they start a BI project—if they hope to improve 
how people do their jobs. 

The new, greater scope of these BI projects gives CIOs a 
strong justification for working with the business to study 
processes and determine how these tools and the insights they 
provide can support and improve them. Companies that use 
BI to uncover flawed business processes are in a much better 
position to successfully compete than those companies that 
use BI merely to monitor what’s happening. Indeed, CIOs 
who don’t use BI to transform business operations put their 
companies at a disadvantage. For CIOs who have carried out 
this difficult strategy successfully, there is no looking back. 

Avnet, a computer systems, component, and embedded 
subsystems manufacturer, took the new process-oriented BI 
strategy directly to the processes that matter most: selling 
and serving customers. The company has put together a sys- 
tem from three BI vendors—Informatica, Business Objects, 
and InfoBurst—to generate reports on orders, shipment 
schedules, and dates by which Avnet will no longer manufac- 
ture certain products. Reports, however, were just the begin- 
ning. To transform the sales and customer service processes, 
CIO Steve Phillips rolled out the system to 2,000 salespeople 
so that they could actively incorporate that information into 
their day-to-day workflows and interactions with customers. 

Employees use the information to modify their individ- 
ual and team work practices, which leads to improved per- 
formance among the sales teams. When sales executives see 
a big difference in performance from one team to another, 
they work to bring the laggard teams up to the level of the 
leaders. “We try to identify, using our reporting tools, where 
best practices exist inside our work teams and then extend 
those best practices across the company,” says Phillips. 

One of those best practices is to alert customers if a prod- 
uct they have purchased in the past is about to be discontinued. 
Salespeople can ensure that customers have ordered enough 
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for all of their future needs or identify a new component to 
replace the one that’s being phased out. Those kinds of conver- 
sations boost sales and convince customers that Avnet’s 
salespeople are looking out for their needs and interests. 

It helps that Avnet’s sales team is flexible and willing to 
adapt to the information. “Because our sales team is so flex- 
ible, they’ll take this information from BI reports and change 
processes when they see a benefit to it,” says Phillips. Some- 
times, they don’t even realize they are changing the ways 
they work—a kind of organic reengineering. Indeed, sales- 
people benefit so directly from better information and have 
such a big impact on revenue that they can be the best advo- 
cates for transformative BI in the company. 

Yet this kind of effortless link between information and 
processes doesn’t happen by magic. Phillips says his company 
has been able to use BI effectively because IT and business us- 
ers have worked closely and steadily. “We needed to know how 
things really happen day to day, over and above the documented 
processes so that we could anticipate some of the business's in- 
formation needs as we built out the warehouse,” says Phillips. 

Now that the BI system matches up with the way the 
company conducts its business, improving those processes 
and sharing the improvements are that much easier. “This is 
not just about reporting,” says Phillips. “It’s about using BI 
to make us smarter.” 

Quaker Chemical used its BI system to change com- 
pletely the way it manages accounts receivable. In the past, 
the process of keeping track of whether customers paid their 
bills, and if they paid them on time, was primarily the pur- 
view of employees in the accounting department. Collection 
managers used the company’s accounting system to identify 
which accounts were overdue, but they had limited informa- 
tion about the details of overdue balances. As a result, they 
had visibility only into glaring payment problems—customers 
who hadn’t paid their bills at all in 60 days or more—and 
couldn’t proactively identify which customers were at risk 
for not paying in full. Occasionally, they asked a sales man- 
ager to get involved, but the whole process for identifying 
which customers weren’t paying and why they weren’t pay- 
ing and putting salespeople on the case was ad hoc. 

‘To improve accounts receivable, Quaker Chemical decided 
in early 2005 that salespeople needed to play a larger, more for- 
mal role in the collections process. After all, they were the ones 


CASE STUDY QUESTIONS 


1. What are the business benefits of BI deployments such 
as those implemented by Avnet and Quaker Chemical? 
What roles do data and business processes play in 
achieving those benefits? 


2. What are the main challenges to the change of mindset 
required to extend BI tools beyond mere reporting? 
What can companies do to overcome them? Use exam- 
ples from the case to illustrate your answer. 


3. Both Avnet and Quaker Chemical implemented systems 
and processes that affect the practices of their salespeople. 
In which ways did the latter benefit from these new im- 
plementations? How important was their buy-in to the 
success of these projects? Discuss alternative strategies for 
companies to foster adoption of new systems like these. 


who had the primary relationship with the customers and had 
opportunities to speak with them more often, more proactively, 
and more sympathetically about their outstanding payments. 

‘To get the salespeople involved, the IT department created 
a data mart that extracted accounts receivable information from 
transaction systems: It analyzed historical payments and his- 
torical balances by customer and by transaction and then loaded 
it into the data warehouse. By using its BI tools from SAS to 
analyze factors such as the amount of time it took Quaker 
Chemical to collect payment from a customer on a given 
invoice, as well as the number of times a customer paid part, but 
notall, of what he or she owed, the company was able to identify 
which customers were consistently paying late and which cus- 
tomers weren’t paying at all. The IT department programmed 
the data warehouse to run reports automatically on which cus- 
tomers still owed money to Quaker Chemical. The system 
would then send those reports directly to the sales manager in 
charge of those accounts several times a month so that they 
could follow up with those customers. Collections managers no 
longer have to keep tabs on this information manually. 

Quaker CIO Irving Tyler says this business process 
change was successful in part because IT was careful to de- 
liver only the most specific, relevant information in these 
reports to salespeople. “If you don’t focus the information 
and deliver it intelligently, people won’t understand how to 
incorporate it into their workflows,” says Tyler. This kind of 
dramatic change in process needs to be linked to the overall 
business strategy, according to Tyler. “Information doesn’t 
necessarily change anything. You have to have a strategy to 
drive any change,” he says. 

Avnet and Quaker Chemical demonstrate that BI is about 
more than decision support. As a result of improvements in the 
technology and the way CIOs are implementing it, BI now has 
the potential to transform organizations. CIOs like Avnet’s 
Phillips and Quaker Chemical’s Tyler who successfully use BI 
to improve business processes contribute to their organizations 
in more far-reaching ways than by implementing basic report- 
ing tools. “Our BI system provides information that helps us 
seek out greater efficiency,” says Avnet’s Phillips. 


Source: Adapted from Meridith Levinson, “Business Intelligence: Not Just for 
Bosses Anymore,” CIO Magazine, January 15, 2006; and Diann Daniel, “Five 
Ways to Get Your Employees Better Information More Quickly,” CIO Maga- 
zine, January 10, 2008. 


REAL WORLD ACTIVITIES 


1. Search the Internet for other examples of both “mere 
reporting” and transformational implementations of 
business intelligence tools. In which ways are these sim- 
ilar to the ones discussed in the case? In which ways are 
these different? What seem to be the main distinction 
between reporting and process-transformation BI roll- 
outs? Prepare a report to summarize your findings. 


2. How do you think the possession or access to certain 
information shapes the political dynamics of organiza- 
tions? Do you believe companies should be open about 
widespread access to information, or will they be better 
off by restricting it? Why? Break into small groups with 
your classmates to discuss these issues, and take turns 
advocating the two alternative positions. 
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FIGURE 9.2 Information requirements of decision makers. The type of information required by directors, executives, 
managers, and members of self-directed teams is directly related to the level of management decision making involved and the 
structure of decision situations they face. 


Decision Structure Information Characteristics 
Unstructured 
Ad Hoc 
Unscheduled 
Summarized 
Infrequent 
Forward Looking 
External 
Wide Scope 
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Prespecified 
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Frequent 
Historical 
Internal 


Structured Narrow Focus 


FIGURE 9.3 


A summary of the attributes 
of information quality. This 
figure outlines the attributes 
that should be present in 
high-quality information 
products. 


Time Dimension 


Timeliness Information should be provided when it is needed. 

Currency Information should be up-to-date when it is provided. 

Frequency Information should be provided as often as needed. 

Time Period Information can be provided about past, present, and future 
time periods. 

Content Dimension 

Accuracy Information should be free from errors. 


Relevance Information should be related to the information needs of a 
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FIGURE 9.4 Examples of decisions by the type of decision structure and level of management. 


Decision Operational Tactical Strategic 

Structure Management Management Management 

Unstructured Cash management Business process reengineering New e-business initiatives 

Workgroup performance analysis Company reorganization 

Semistructured Credit management Employee performance appraisal Product planning 
Production scheduling Capital budgeting Mergers and acquisitions 
Daily work assignment Program budgeting Site location 

Structured Inventory control Program control 

Decision Structure One way to understand decision making is to look at decision structure. Decisions made 


at the operational management level tend to be more structured, those at the tactical level 
are more semistructured, and those at the strategic management level are more unstruc- 
tured. Structured decisions involve situations in which the procedures to follow, when a 
decision is needed, can be specified in advance. The inventory reorder decisions that 
most businesses face are a typical example. Unstructured decisions involve decision situ- 
ations in which it is not possible to specify in advance most of the decision procedures to 
follow. Most decisions related to long-term strategy can be thought of as unstructured 
(e.g., “What product lines should we develop over the next five years?”). Most business 
decision situations are semistructured; that is, some decision procedures can be prespeci- 
fied but not enough to lead to a definite recommended decision. For example, decisions 
involved in starting a new line of e-commerce services or making major changes to em- 
ployee benefits would probably range from unstructured to semistructured. Finally, deci- 
sions that are unstructured are those for which no procedures or rules exist to guide the 
decision makers toward the correct decision. In these types of decisions, many sources of 
information must be accessed, and the decision often rests on experience and “gut feel- 
ing.” One example of an unstructured decision might be the answer to the question, 
“What business should we be in 10 years from now?” Figure 9.4 provides a variety of 
examples of business decisions by type of decision structure and level of management. 

Therefore, information systems must be designed to produce a variety of informa- 
tion products to meet the changing needs of decision makers throughout an organiza- 
tion. For example, decision makers at the strategic management level may look to decision 
support systems to provide them with more summarized, ad hoc, unscheduled reports, 
forecasts, and external intelligence to support their more unstructured planning and 
policymaking responsibilities. Decision makers at the operational management level, in 
contrast, may depend on management information systems to supply more prespecified 
internal reports emphasizing detailed current and historical data comparisons that sup- 
port their more structured responsibilities in day-to-day operations. Figure 9.5 com- 
pares the information and decision support capabilities of management information 
systems and decision support systems, which we will explore in this chapter. 


Decision The emerging class of applications focuses on personalized decision support, modeling, 
Su p p ort information retrieval, data warehousing, what-if scenarios, and reporting. 


Trends As we discussed in Chapter 1, using information systems to support business decision 
making has been one of the primary thrusts of the business use of information technol- 
ogy. During the 1990s, however, both academic researchers and business practitioners 
began to report that the traditional managerial focus originating in classic management 
information systems (1960s), decision support systems (1970s), and executive information 
systems (1980s) was expanding. The fast pace of new information technologies like PC 
hardware and software suites, client/server networks, and networked PC versions of DSS 
software made decision support available to lower levels of management, as well as to 
nonmanagerial individuals and self-directed teams of business professionals. 


FIGURE 9.5 
Comparing the major 
differences in the 
information and decision 
support capabilities of 
management information 
systems and decision 
support systems. 


FIGURE 9.6 


A business must meet the 
information and data 
analysis requirements of 
its stakeholders with more 
personalized and proactive 
Web-based decision 
support. 
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Management 


Decision Support 


Information Systems Systems 
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or opportunities 
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e Information form and 
frequency 
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Periodic, exception, 
demand, and push 
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Ad hoc, flexible, and 
adaptable format 


e Information format Prespecified, fixed format 


Information produced by 
analytical modeling of 
business data 


Information produced by 
extraction and manipulation 
of business data 


e Information processing 
methodology 


This trend has accelerated with the dramatic growth of the Internet, as well as of 
intranets and extranets that internetwork companies and their stakeholders. The 
e-business and e-commerce initiatives that are being implemented by many companies 
are also expanding the information and decision support uses and the expectations of 
a company’s employees, managers, customers, suppliers, and other business partners. 
Figure 9.6 illustrates that all business stakeholders expect easy and instant access to 
information and Web-enabled self-service data analysis. Today’s businesses are re- 
sponding with a variety of personalized and proactive Web-based analytical techniques 
to support the decision-making requirements of all of their constituents. 

‘Thus, the growth of corporate intranets and extranets, as well as the Web, has ac- 
celerated the development and use of “executive-class” information delivery and deci- 
sion support software tools by lower levels of management and by individuals and 
teams of business professionals. In addition, this dramatic expansion has opened the 
door to the use of such business intelligence (BI) tools by the suppliers, customers, and 
other business stakeholders of a company for customer relationship management, sup- 
ply chain management, and other e-business applications. 

In 1989, Howard Dresner (later a Gartner Group analyst) proposed BI as an um- 
brella term to describe “concepts and methods to improve business decision making 
by using fact-based support systems.” It was not until the late 1990s that this usage 
became widespread. ‘Today, BI is considered a necessary and mission critical element 
in crafting and executing a firm’s strategy. Consider the following findings from a 
2009 Gartner Group study: 


e Because of lack of information, processes, and tools, through 2012, more than 
35 percent of the top 5,000 global companies will regularly fail to make insightful 
decisions about significant changes in their business and markets. 


e By 2012, business units will control at least 40 percent of the total budget for 
business intelligence. 


Decision 
Support Response 


Business Stakeholder 
Requirements 


Personalized, Proactive 
Decision Analytics an 
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FIGURE 9.7 


Business intelligence 
applications are based on 
personalized and Web- 
enabled information 
analysis, knowledge 


management, and decision 


support technologies. 


Hyatt Hotels: 
Dashboards 
Integrate Financial 
and Operational 
Information 


Analytical 
Processing 


e By 2010, 20 percent of organizations will have an industry-specific analytic appli- 
cation, delivered via software as a service, as a standard component of their busi- 
ness intelligence portfolio. 


e In 2009, collaborative decision making will emerge as a new product category 
that combines social software with business intelligence platform capabilities. 


When you consider some of these findings, it becomes easy to see that BI is rapidly 
becoming the mainstay for business decision making in the modern organization. Be- 
fore long, it will evolve into a competitive necessity for many industries. 

Figure 9.7 highlights several major information technologies that are being cus- 
tomized, personalized, and Web-enabled to provide key business information and 
analytical tools for managers, business professionals, and business stakeholders. We 
highlight the trends toward such business intelligence applications in the various types 
of information and decision support systems that are discussed in this chapter. 


A few years ago, executives at Chicago-based Hyatt Hotels decided the company 
needed a way to consolidate its disparate financial data so that it could more easily 
forecast future sales and plan its business accordingly. In other words, the company 
wanted to install a typical financial performance management layer, with dashboards 
and scorecards for top-level managers. But after some discussion on the matter, the 
installation grew not-so-typical. 

Gebhard Rainer, Hyatt’s vice president of hotel finance and systems, wanted to 
combine these financial elements—budgeting, planning, modeling, and reporting— 
with operational data from the hotels themselves. ‘The idea was that a complete pic- 
ture of the company’s business, available on a daily basis to executives as well as hotel 
managers, was not possible without having the two together in the same dashboard. 

Motivating the concept was a changing world, with terrorist risks and natural 
disasters causing an ever-shifting array of business variables. Rainer, in a Middle 
Eastern country in the aftermath of a terrorist attack several years ago, confronted 
these issues first-hand—as did the company, which owns hotels in New Orleans and 
along the hurricane-ravaged Gulf Coast. The first line of business is the safety of 
hotel guests. But in terms of the big picture, hotel companies must re-forecast their 
business goals from the ground up based on a set of entirely new metrics dealing 
with issues from resource allocation to skittish tourists rethinking their travel plans. 
It wasn’t a job for spreadsheets. 

Hyatt was among the first of Hyperion’s customers to adopt System 9. The com- 
pany selected Hyperion based on its “integrateability” with its source systems, as well 
as its user-friendliness. At first, Hyatt wanted a small-scale installation, delivering the 


Decision 
Support 
Systems 


Example 


DSS Components 
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System 9 dashboards to about 40 executive users. “This phase was a ‘show-me-what- 
you-can-do’ thing,” says Sufel Barkat, Hyatt’s assistant vice president for financial sys- 
tems. “We simply wanted to understand the capability of the tools. The next stage will 
have a much bigger impact.” The ultimate plan is to spread the system throughout the 
Hyatt organization to its many subsidiaries, in the United States and abroad, and to its 
individual properties—full-blown operational BI. Eventually, hotel managers will have 
access to dashboards so that everyone is on the same page, and so that local employees 
can make local decisions based on the same information viewed at headquarters. 

Hyatt ended up using a data warehouse from Teradata to cleanse operational infor- 
mation coming from the decentralized ERP systems of Hyatt’s individual hotels around 
the world. The company also uses the warehouse to store and cleanse external market- 
ing data, such as what the competition is up to, or market share in each region. 

On the financial side, other sources include the proprietary company’s general 
ledger system and an Oracle database—systems already consolidated and unified 
through Hyatt’s original performance management outlay. 

The next step will be to deliver the dashboards to between 500 and 600 users at 
Hyatt—all the way down to the regional manager level. The full-blown operational 
BI roll-out will target around 3,000 users. So far, in these early stages, Barkat hasn’t 
been able to quantify the results of System 9 with any real figures. But, he says, users 
have been providing feedback on metrics, which, to him, indicates a strong “cultural 
and business adaptation” among Hyatt’s executive class. 


Source: Adapted from Scott Eden, “Hyatt Merges Financial, Ops Data,” InformationWeek, January 17, 2006. 


Decision support systems are computer-based information systems that provide inter- 
active information support to managers and business professionals during the decision- 
making process. Decision support systems use (1) analytical models, (2) specialized 
databases, (3) a decision maker’s own insights and judgments, and (4) an interactive, 
computer-based modeling process to support semistructured business decisions. 


An example might help at this point. Sales managers typically rely on management 
information systems to produce sales analysis reports. These reports contain sales per- 
formance figures by product line, salesperson, sales region, and so on. A decision sup- 
port system (DSS), however, would also interactively show a sales manager the effects 
on sales performance of changes in a variety of factors (e.g., promotion expense and 
salesperson compensation). The DSS could then use several criteria (e.g., expected 
gross margin and market share) to evaluate and rank alternative combinations of sales 
performance factors. 

Therefore, DSS are designed to be ad hoc, quick-response systems that are initi- 
ated and controlled by business decision makers. Decision support systems are thus 
able to support directly the specific types of decisions and the personal decision-making 
styles and needs of individual executives, managers, and business professionals. 


Unlike management inform ation systems, decision support systems rely on model 
bases as well as databases as vital system resources. A DSS model base is a software 
component that consists of models used in computational and analytical routines that 
mathematically express relationships among variables. For example, a spreadsheet 
program might contain models that express simple accounting relationships among 
variables, such as Revenue — Expenses = Profit. A DSS model base could also include 
models and analytical techniques used to express much more complex relationships. 
For example, it might contain linear programming models, multiple regression fore- 
casting models, and capital budgeting present value models. Such models may be 
stored in the form of spreadsheet models or templates, or statistical and mathematical 
programs and program modules. See Figure 9.8. 
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FIGURE 9.8 


Components of a Web- 
enabled marketing decision 
support system. Note the 
hardware, software, model, 
data, and network resources 
involved. 


Data Marts and Other Databases 


In addition, DSS software packages can combine model components to create 
integrated models that support specific types of decisions. DSS software typically 
contains built-in analytical modeling routines and also enables you to build your own 
models. Many DSS packages are now available in microcomputer and Web-enabled 
versions. Of course, electronic spreadsheet packages also provide some of the model 
building (spreadsheet models) and analytical modeling (what-if and goal-seeking 
analysis) offered by more powerful DSS software. As businesses become more aware 
of the power of decision support systems, they are using them in ever-increasing 
areas of the business. See Figure 9.9. 


FIGURE 9.9 Many businesses are turning to decision support systems and their underlying models to improve a wide 
variety of business functions. 


Analytics competitors make expert use of statistics and modeling to improve a wide variety of functions. Here are 
some common applications: 


Function Description Exemplars 

Supply chain Simulate and optimize supply chain flows; Dell, Wal-Mart, Amazon 
reduce inventory and stockouts. 

Customer selection, loyalty, Identify customers with the greatest profit potential; Harrah’s, Capital One, Barclays 

and service increase likelihood that they will want the product 
or service offering; retain their loyalty. 

Pricing Identify the price that will maximize yield or profit. Progressive, Marriott 

Human capital Select the best employees for particular tasks or jobs New England Patriots, Oakland 
at particular compensation levels. A's, Boston Red Sox 

Product and service quality Detect quality problems early and minimize them. Honda, Intel 

Financial performance Better understand the drivers of financial performance MCI, Verizon 


and the effects of nonfinancial factors. 


Research and development Improve quality, efficacy, and, where applicable, Novartis, Amazon, Yahoo 
safety of products and services. 


Source: Adapted from Thomas H. Davenport, “Competing on Analytics,” Harvard Business Review, January 2006. 
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New economic research affirms what most executives suspect: Even when given good 
data, people make bad decisions. We misunderstand, misinterpret, and mismanage 
important problems. It’s not that we’re stupid; our thought processes have bugs. 
There are technologies emerging now to help us fix those bugs. Decision support 
software has been around for years, but its latest incarnations tap pervasive comput- 
ing power to generate thousands of scenarios covering all conceivable real-world 
contingencies. Products such as @risk and XL Sim allow people to test their assump- 
tions through what is essentially repeated rolls of the dice: random number genera- 
tion. The technique, known as Monte Carlo simulation, can turn ordinary spreadsheets 
into probabilistic wind tunnels for designing good decisions. 

“With any luck, the rise of cheap, easy Monte Carlo simulations will reduce the 
number of stupid decisions managers make by relying on simplistic averages,” says 
Sam Savage, the creator of XL Sim and a pioneer in spreadsheet-based statistical 
literacy, as well as a consulting professor at Stanford University. 

Consider the case of a Silicon Valley product manager who has just been asked to 
forecast demand for a next-generation microchip. “The guy typically will offer a 
forecast range between, say, 50,000 and 150,000 units,” he says. The problem, says 
Savage, is that the boss doesn’t want a range. He wants a number. So the manager 
says, “100,000,” the average. So the boss plugs that figure and the cost of building a 
100,000-chip-capacity plant into a spreadsheet. The bottom line is a healthy $10 mil- 
lion, which he reports to his board as the average expected profit. Assuming that 
demand is the only uncertainty and that 100,000 is the correct average, then $10 mil- 
lion must be the best guess for profit. Right? Wrong. 

What Savage calls “the flaw of averages” ensures that average profit has to be less 
than the profit associated with the predicted average demand. If demand is less than 
100,000, then profits will be lower than $10 million. Yet the profits can never be 
higher than $10 million because the maximum capacity of the plant is based on a 
flawed average. Consequently, the product manager’s correct forecast of average 
demand leads to an inflated forecast of average profit. 

Savage predicts that, one day, every executive who manages plant capacity, every 
investor with a stock portfolio, and every employee with a retirement fund will be 
running Monte Carlo simulations to test their intuitive assumptions about average 
returns and average losses. 


Source: Adapted from Michael Schrage, “Decision Support Software Shows You the Scenarios,” CIO Magazine, 
January 1, 2003. 


Recall from Chapter 1 that management information systems were the original type 
of information system developed to support managerial decision making. An MIS 
produces information products that support many of the day-to-day decision-making 
needs of managers and business professionals. Reports, displays, and responses pro- 
duced by management information systems provide information that these decision 
makers have specified in advance as adequately meeting their information needs. 
Such predefined information products satisfy the information needs of decision 
makers at the operational and tactical levels of the organization who are faced with 
more structured types of decision situations. For example, sales managers rely heav- 
ily on sales analysis reports to evaluate differences in performance among salespeo- 
ple who sell the same types of products to the same types of customers. They have a 
pretty good idea of the kinds of information about sales results (by product line, 
sales territory, customer, salesperson, and so on) that they need to manage sales 
performance effectively. 

Managers and other decision makers use an MIS to request information at 
their networked workstations that supports their decision-making activities. This 
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information takes the form of periodic, exception, and demand reports and imme- 
diate responses to inquiries. Web browsers, application programs, and database 
management software provide access to information in the intranet and other op- 
erational databases of the organization. Remember, operational databases are main- 
tained by transaction processing systems. Data about the business environment are 
obtained from Internet or extranet databases when necessary. 


Management Management information systems provide a variety of information products to man- 
Reporting agers. Four major reporting alternatives are provided by such systems. 
Alternatives e Periodic Scheduled Reports. This traditional form of providing informa- 


tion to managers uses a prespecified format designed to provide managers 
with information on a regular basis. Typical examples of such periodic sched- 
uled reports are daily or weekly sales analysis reports and monthly financial 
statements. 


e Exception Reports. In some cases, reports are produced only when exceptional 
conditions occur. In other cases, reports are produced periodically but contain in- 
formation only about these exceptional conditions. For example, a credit manager 
can be provided with a report that contains only information on customers who 
have exceeded their credit limits. Exception reporting reduces information overload 
instead of overwhelming decision makers with periodic detailed reports of busi- 
ness activity. 


e Demand Reports and Responses. Information is available whenever a manager 
demands it. For example, Web browsers, DBMS query languages, and report 
generators enable managers at PC workstations to get immediate responses or to 
find and obtain customized reports as a result of their requests for the informa- 
tion they need. Thus, managers do not have to wait for periodic reports to arrive 
as scheduled. 


e Push Reporting. Information is pushed to a manager’s networked workstation. 
Thus, many companies are using Webcasting software to broadcast selectively 
reports and other information to the networked PCs of managers and specialists 
over their corporate intranets. See Figure 9.10. 


FIGURE 9.10 An example of the components in a marketing intelligence system that uses the Internet and a 
corporate intranet system to “push” information to employees. 
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FIGURE 9.11 


Online analytical processing 
may involve the use of 
specialized servers and 
multidimensional databases. 
OLAP provides fast answers 
to complex queries posed by 
managers and analysts using 
traditional and Web- 
enabled OLAP software. 
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At a stockholder meeting, the former CEO of PepsiCo, D. Wayne Calloway, said: 
“Ten years ago I could have told you how Doritos were selling west of the Mississippi. 
Today, not only can I tell you how well Doritos sell west of the Mississippi, I can also 
tell you bow well they are selling in California, in Orange County, in the town of 
Irvine, in the local Vons supermarket, in the special promotion, at the end of Aisle 4, 
on Thursdays.” 


The competitive and dynamic nature of today’s global business environment is 
driving demands by business managers and analysts for information systems that can 
provide fast answers to complex business queries. The IS industry has responded to 
these demands with developments like analytical databases, data marts, data ware- 
houses, data mining techniques, and multidimensional database structures (discussed 
in Chapter 5), and with specialized servers and Web-enabled software products that 
support online analytical processing (OLAP). 

Online analytical processing enables managers and analysts to interactively ex- 
amine and manipulate large amounts of detailed and consolidated data from many 
perspectives. OLAP involves analyzing complex relationships among thousands or 
even millions of data items stored in data marts, data warehouses, and other multi- 
dimensional databases to discover patterns, trends, and exception conditions. An 
OLAP session takes place online in real time, with rapid responses to a manager’s or 
analyst’s queries, so that the analytical or decision-making process is undisturbed. 
See Figure 9.11. 

Online analytical processing involves several basic analytical operations, including 
consolidation, “drill-down,” and “slicing and dicing.” See Figure 9.12. 


e Consolidation. Consolidation involves the aggregation of data, which can in- 
volve simple roll-ups or complex groupings involving interrelated data. For 
example, data about sales offices can be rolled up to the district level, and the 
district-level data can be rolled up to provide a regional-level perspective. 


e Drill-down. OLAP can also go in the reverse direction and automatically display 
detailed data that comprise consolidated data. This process is called drill-down. 
For example, the sales by individual products or sales reps that make up a region’s 
sales totals could be easily accessed. 


e Slicing and Dicing. Slicing and dicing refers to the ability to look at the database 
from different viewpoints. One slice of the sales database might show all sales of a 
product type within regions. Another slice might show all sales by sales channel 
within each product type. Slicing and dicing is often performed along a time axis 
to analyze trends and find time-based patterns in the data. 
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FIGURE 9.12 


Comshare’s Management 


Planning and Control 


software enables business 


professionals to use 


Microsoft Excel as their 
user interface for Web- 
enabled online analytical 


processing. 


OLAP Examples 


Source: Courtesy of Microsoft®. 


Probably the best way to understand the power of OLAP fully is to look at common 
business applications of the technique. The real power of OLAP comes from the mar- 
riage of data and models on a large scale. Through this marriage, managers can solve a 
variety of problems that previously would be considered too complex to tackle effec- 
tively. Common business areas where OLAP can solve complex problems include: 


e Marketing and sales analysis 

e Clickstream data 

e Database marketing 

e Budgeting 

e Financial reporting and consolidation 
e Profitability analysis 

e Quality analysis 


Let’s look at one or two examples of how OLAP can be used in the modern busi- 
ness setting. 

It is near the end of a business quarter, and senior management is worried about the 
market acceptance of several new products. A marketing analyst is asked to provide an 
update to senior management. The problem is that the update must be delivered in less 
than an hour due to a last-minute request from the CEO. The analyst really only has a 
few minutes to analyze the market acceptance of several new products, so she decides to 
group 20 products that were introduced between six and nine months ago and compare 
their sales with a comparable group of 50 products introduced between two and three 
years ago. The analyst just defines two new, on-the-fly, product groupings and creates a 
ratio of the new group to the older group. She can then track this ratio of sales revenue 
or volume by any level of location, over time, by customer sector or by sales group. De- 
fining the new groupings and the ratio takes a couple of minutes, and any of the analyses 
take a matter of a few seconds to generate, even though the database has tens of thou- 
sands of products and hundreds of locations. It takes no more than a total of 15 minutes 
to spot that some regions have not accepted the new products as fast as others. 

Then, the analyst investigates whether this was because of inadequate promotion, 
unsuitability of the new products, lack of briefings of the sales force in the slow areas, or 
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whether some areas always accept new products more slowly than others. Looking at 
other new product introductions by creating new groupings of products of different 
ages, she finds that the same areas are always conservative when introducing expensive 
new products. She then uses this information to see if the growth in the slow areas is in 
line with history and finds that some areas have taken off even more slowly than previ- 
ously. Given the results of this analysis, senior management decides it is premature in its 
concern and tables further discussion until the next quarterly sales data can be assessed. 

In another example, let’s consider a general merchandise retailer who has joined 
the e-tailing ranks, wants the company Web site to be as “sticky” as possible, and has 
begun to analyze clickstream data to surmise why customers might leave the site pre- 
maturely. The company sharpened its analysis to determine the value of abandoned 
shopping carts. When a customer leaves the site in the middle of a shopping trip, for 
whatever reason, the company looks to see what products were in the abandoned cart. 
The data are then compared with similar data from other carts to examine: 


e How much revenue the abandoned carts represented (in other words, the amount 
of revenue that was lost because of the customer’s early departure). 


e Whether the products in the cart were high-profit items or loss leaders. 
e Whether the same products were found in other abandoned carts. 
e The volume of products and the number of different product categories in the cart. 


e Whether the total bill for the abandoned carts consistently fell within a certain 
dollar range. 


e How the average and total bills for abandoned carts compared with unabandoned 
carts (those that made it through the checkout process). 


The results of using OLAP to conduct this analysis trigger some interesting theories. 
For instance, it is possible that none of the products in the cart was appealing enough to 
a particular customer to keep that customer shopping. The customer might have been 
annoyed by frequent inquiries, such as “Are you ready to check out?” At a particular dol- 
lar total, the customer might have changed his or her mind about the entire shopping trip 
and left. It’s also possible that a number or mix of products in a cart reminded the cus- 
tomer of another site that might offer a steeper discount for similar purchases. 

Admittedly, some of these theories are mere guesses. After all, maybe the custom- 
er’s Internet connection was on the fritz, or the site had a bug that abruptly booted the 
user. When examined regularly and with consistent metrics, however, clickstreams can 
reveal interesting patterns. After several analyses, the e-tailer decides to make some 
changes to the Web site. 

First, the e-tailer tweaks the site to show a rolling total as items are added to the 
cart, thereby allowing the customer to see the total charge during the shopping time 
and to check out once the magic budget limit is reached. In addition, rather than re- 
quiring the customer to go to another page for specific product information, the site 
now invites the customer to see pop-up product information with a click of the right 
mouse button, keeping the buy mode alive. Finally, the vendor decides to integrate the 
clickstream data with more specific customer behavior information, including infor- 
mation from the CRM system. 

Rather than just examining a customer’s navigation patterns and guessing about 
which actions to take, the e-tailer can combine those patterns with more specific cus- 
tomer data (such as previous purchases in that product category, key demographic and 
psychographic data, or lifetime value score) to provide a complete view of that custom- 
er’s value and interests. That kind of analysis will show you whether the lost customer 
was a one-time-only shopper or a high-value customer. A tailored e-mail message or 
electronic coupon—perhaps targeting one of the products left behind on a prior trip— 
could make all the difference the next time that high-value customer logs on. 

Here’s a real-world example of how OLAP can help solve complex business 
problems. 
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Even before bad debt shook the mortgage industry, Direct Energy was feeling its 
effects, including eroding revenue streams due to customer churn. Until then, the 
company effectively mined its way out in the best fashion: business intelligence. “Var- 
ious groups were pulling data from various systems and not having integrated infor- 
mation,” explains John Katsinos, vice president of IS for Direct Energy’s mass markets 
operations. “There was no way to tie together a customer’s end-to-end lifecycle.” 

Without that holistic view of customer records, it was difficult for Direct Energy 
analysts to understand, let alone prevent, customer churn. So began BI Jumpstart, the 
company’s initiative to give its analysts insight into customer actions that precipitate 
into the dropping of Direct Energy services, as well as tools for forecasting bad debt. 
The result has been savings of tens of millions of dollars and a more proactive approach 
to customer retention via more accurate pricing, forecasting, and targeted marketing. 

“We wanted to mitigate the risk to our business and customer base, and to grow 
our customer base and revenue,” Katsinos adds. 

“That meant being able to understand customer data at a level where we can fore- 
cast and predict behavior.” Katsinos kicked off BI Jumpstart by assembling a crack 
analytics team consisting of an IS project manager, a data modeler, a pair of ETL de- 
velopers, an analytic developer, a BI architect, and a BI administrator. That group 
then implemented a “multilayered business intelligence” strategy that, Katsinos ex- 
plains, comprises data warehousing, data marts, OLAP repositories, and ETL. 

The result is a data miner’s dream: Direct Energy analysts can use the integrated 
BI program to predict what customers in which areas are likely to turn over, and then 
adjust the company’s services, pricing, and marketing campaigns accordingly. 

For example, with BI Jumpstart in place, Direct Energy can now determine why 
one of its offerings experiences a 2 percent churn while another sees 20 percent of its 
customers dropping the service. 

More than an initiative geared toward new revenue streams, BI Jumpstart helps 
Direct Energy make the most of what it already has. “Now, we can slice and dice any 
way we want,” Katsinos says. 


Source: Adapted from Tom Sullivan, “Direct Energy Mines BI to Conserve Revenue Streams,” InfoWorld, 
November 17, 2008. 


Geographic information systems (GIS) and data visualization systems (DVS) are spe- 
cial categories of DSS that integrate computer graphics with other DSS features. A 
geographic information system is a DSS that uses geographic databases to construct and 
display maps, as well as other graphics displays that support decisions affecting the 
geographic distribution of people and other resources. Many companies are using GIS 
technology along with g/obal positioning system (GPS) devices to help them choose new 
retail store locations, optimize distribution routes, or analyze the demographics of 
their target audiences. For example, companies like Levi Strauss, Arby’s, Consolidated 
Rail, and Federal Express use GIS packages to integrate maps, graphics, and other 
geographic data with business data from spreadsheets and statistical packages. GIS 
software such as MapInfo and Atlas GIS is used for most business GIS applications. 
See Figure 9.13. 

Data visualization systems represent complex data using interactive, three- 
dimensional, graphical forms such as charts, graphs, and maps. DVS tools help users 
interactively sort, subdivide, combine, and organize data while the data are in their 
graphical form. This assistance helps users discover patterns, links, and anomalies in 
business or scientific data in an interactive knowledge discovery and decision support 
process. Business applications like data mining typically use interactive graphs that let 
users drill down in real time and manipulate the underlying data of a business model 
to help clarify their meaning for business decision making. Figure 9.14 is an example 
of airline flight analysis by a data visualization system. 
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The concept of the geographic information system and data visualization is not a 
new one. One of the first recorded uses of the concept occurred in September 1854. 
During a 10-day period, 500 people, all from the same section of London, England, 
died of cholera. Dr. John Snow, a local physician, had been studying this cholera epi- 
demic for some time. In trying to determine the source of the cholera, Dr. Snow lo- 
cated every cholera death in the Soho district of London by marking the location of 
the home of each victim with a dot on a map he had drawn. Figure 9.15 contains a 
replica of his original map. 


FIGURE 9.14 s n Flight Paths (link color = delay, node height = volume) 
Using a data visualization j 
system to analyze airplane 
flights by segment and 
average delay, with drill 


down to details. 


Source: Courtesy of ADVIZOR Solutions, Inc. www.advisorsolutions.com. 
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Source: E.R. Tufte, The Visual Display of Quantitative Information, 
2nd ed. (Cheshire, Connecticut; Graphics Press, 2001), p. 24. 


As can be seen on the map, Dr. Snow marked the deaths with dots, and the 11 
Xs represent water pumps. By examining the scattering and clustering of the dots, 
Dr. Snow observed that the victims of the cholera shared one common attribute: 
They all lived near—and drank from—the Broad Street water pump. To test his 
hypothesis, Dr. Snow requested that the handle of the pump be removed, thus ren- 
dering it inoperable. Within a very short time, the cholera epidemic, which claimed 
more than 500 lives, was over. 


Visualizing and understanding vast quantities of credit market data can be overwhelming 
using traditional techniques such as charts and tables. Navigating through this data to 
find specific reports and analytical information can also prove daunting and traditional 
information delivery mechanisms have tended to provide unruly volumes of data. 

The Internet is today the obvious delivery mechanism for such market data and 
proprietary analyses, yet the providers of such services must deliver more intuitive 
visualization and navigation to provide better value to their customers. 

Fixed income research and analytics providers are looking at new means of visu- 
alizing data to provide more valuable and intuitive services to their users by going 
beyond simple online tables, charts, and document repositories. 

JPMorgan created their CreditMap application using Panopticon Developer in 
order to provide their customers with a graphical representation of real-time activity 
in the corporate bond market. JPMorgan blurred the lines between providing in- 
formative research and valuable analytics, which has enabled them to win the 
Euromoney award for “Best Online Fixed Income Research.” 

JPMorgan was able to provide their users with quicker access to their existing 
online information using new visualization and navigation tools. To do this they im- 
plemented Panopticon’s interactive treemap visualization as a presentation layer and 
navigation system that provides a bird’s-eye view of the data at the same time allow- 
ing the user to drill-down to specific reports and analytics. 

JPMorgan’s CreditMap allows users to visualize information through the use of 
color, size and proximity in any way they desire with an easily customizable interface. 
This interface acts as a catalyst enabling users to recognize patterns, analyze informa- 
tion, and make decisions more quickly and more accurately than ever before. Before 
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CreditMap, the brokerage firm’s customers could read text reports on the corporate 
bond market and view various tables of statistical information. But the market is so 
extensive that it could be difficult to keep things in perspective or to be aware of many 
of the investment opportunities. 

CreditMap presents the corporate bond universe as a quilt of rectangles on a com- 
puter screen. The quilt is divided into industry sectors, and the rectangles within each 
sector represent bond issues. The size of the rectangle indicates the size of the issue, 
and the color indicates the issue’s performance. So at a glance, investors can see which 
sectors and which individual issues are hot, and whether an issue’s size fits their invest- 
ment needs. Clicking on a rectangle opens a window that gives basic information on 
the issue—including its ratings and the name and phone number of the analyst who 
covers the issue—along with a drop-down menu offering detailed research. 

“Panopticon treemaps have greatly enhanced our users’ ability to visualize the 
credit markets and utilize analytics—it was an important contributing factor to us 
winning the Euromoney award,” says Lee McGinty, head of European Portfolio & 
Index Strategy at JPMorgan. 


Source: Adapted from Case Study: JPMorgan CreditMap, www.panopticon.com, March 2008. 


A decision support system involves an interactive analytical modeling process. For 
example, using a DSS software package for decision support may result in a series of 
displays in response to alternative what-if changes entered by a manager. This differs 
from the demand responses of management information systems because decision 
makers are not demanding prespecified information; rather, they are exploring possi- 
ble alternatives. Thus, they do not have to specify their information needs in advance. 
Instead, they use the DSS to find the information they need to help them make a deci- 
sion. This is the essence of the decision support system concept. 

Four basic types of analytical modeling activities are involved in using a decision 
support system: (1) what-if analysis, (2) sensitivity analysis, (3) goal-seeking analysis, 
and (4) optimization analysis. Let’s briefly look at each type of analytical modeling that 
can be used for decision support. See Figure 9.16. 


In what-if analysis, a user makes changes to variables, or relationships among variables, 
and observes the resulting changes in the values of other variables. For example, if you 
were using a spreadsheet, you might change a revenue amount (a variable) or a tax rate 


Type of Analytical Modeling Activities and Examples 


What-if analysis Observing how changes to selected variables affect 
other variables. 
Example: What if we cut advertising by 10 percent? 
What would happen to sales? 


Sensitivity analysis Observing how repeated changes to a single variable 
affect other variables. 
Example: Let’s cut advertising by $100 repeatedly so 
we can see its relationship to sales. 


Goal-seeking analysis Making repeated changes to selected variables until 
a chosen variable reaches a target value. 
Example: Let’s try increases in advertising until sales 
reach $1 million. 


Optimization analysis Finding an optimum value for selected variables, 
given certain constraints. 
Example: What’s the best amount of advertising to 
have, given our budget and choice of media? 
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formula (a relationship among variables) in a simple financial spreadsheet model. Then 
you could command the spreadsheet program to recalculate all affected variables in the 
spreadsheet instantly. A managerial user would be able to observe and evaluate any 
changes that occurred to the values in the spreadsheet, especially to a variable such as net 
profit after taxes. To many managers, net profit after taxes is an example of the bottom 
line, that is, a key factor in making many types of decisions. This type of analysis would 
be repeated until the manager was satisfied with what the results revealed about the 
effects of various possible decisions. Figure 9.17 is an example of what-if analysis. 


Sensitivity analysis is a special case of what-if analysis. Typically, the value of only one 
variable is changed repeatedly, and the resulting changes on other variables are ob- 
served. As such, sensitivity analysis is really a case of what-if analysis that involves re- 
peated changes to only one variable at a time. Some DSS packages automatically make 
repeated small changes to a variable when asked to perform sensitivity analysis. Typi- 
cally, decision makers use sensitivity analysis when they are uncertain about the as- 
sumptions made in estimating the value of certain key variables. In our previous 
spreadsheet example, the value of revenue could be changed repeatedly in small incre- 
ments, and the effects on other spreadsheet variables observed and evaluated. This 
process would help a manager understand the impact of various revenue levels on 
other factors involved in decisions being considered. 


Goal-seeking analysis reverses the direction of the analysis done in what-if and sensitivity 
analyses. Instead of observing how changes in a variable affect other variables, goal- 
seeking analysis (also called how-can analysis) sets a target value (goal) for a variable and 
then repeatedly changes other variables until the target value is achieved. For example, 
you could specify a target value (goal) of $2 million in net profit after taxes for a busi- 
ness venture. Then you could repeatedly change the value of revenue or expenses in a 
spreadsheet model until you achieve a result of $2 million. Thus, you would discover 
the amount of revenue or level of expenses the business venture needs to reach the goal 
of $2 million in after-tax profits. Therefore, this form of analytical modeling would 
help answer the question, “How can we achieve $2 million in net profit after taxes?” 
instead of the question, “What happens if we change revenue or expenses?” So, goal- 
seeking analysis is another important method of decision support. 
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Optimization analysis is a more complex extension of goal-seeking analysis. Instead of 
setting a specific target value for a variable, the goal is to find the optimum value for 
one or more target variables, given certain constraints. Then one or more other vari- 
ables are changed repeatedly, subject to the specified constraints, until you discover 
the best values for the target variables. For example, you could try to determine the 
highest possible level of profits that could be achieved by varying the values for se- 
lected revenue sources and expense categories. Changes to such variables could be 
subject to constraints, such as the limited capacity of a production process or limits to 
available financing. Optimization typically is accomplished using software like the 
Solver tool in Microsoft Excel and other software packages for optimization tech- 
niques, such as linear programming. 


Ask Dennis Hernreich, COO and CFO of Casual Male Retail Group, what his life 
was like before he switched to an on-demand business intelligence reporting applica- 
tion, and he remembers the frustration all too easily. 

Casual Male Retail Group, a specialty retailer of big and tall men’s apparel with 
$464 million in annual sales, was using a legacy on-premise reporting application for 
its catalog operations. (The company also has 520 retail outlets and e-commerce 
operations.) Yet the reporting features built into the system were “extremely poor,” 
as Hernreich describes them: “Visibility to the business? Terrible. Real-time infor- 
mation? Doesn’t exist. How are we doing with certain styles by size? Don’t know.” 

“Tt was unacceptable,” Hernreich says. In addition, you could only view those 
“canned” reports (which lacked features such as exception reporting) by making a 
trip to the printer for a stack of printouts. “It was hundreds of pages,” he recalls. 
“That’s just not how you operate today.” 

It’s not as though Casual Male didn’t have all this information; it just didn’t have 
an intuitive and easy way to see the sales and inventory trends for its catalog business 
in real time. That changed in 2004, when Casual Male began to use a on-demand BI 
tool from vendor Oco (www.oco-inc.com), which takes all of Casual Male’s data, 
builds and maintains a data warehouse for it off-site, and creates “responsive, real- 
time reporting dashboards that give us and our business users information at their 
fingertips,” Hernreich says. 

‘Today, Hernreich and Casual Male’s merchandise planners and buyers have ac- 
cess to easy-to-consume dashboards full of catalog data: “What styles are selling to- 
day? How much inventory are we selling today? Where are we short? Where do we 
need to order? How are we selling by size? What are we out of stock in?” he says. 
“All of these basic questions, in terms of running the business—that’s what we’re 
learning every day from these reports.” 

Best of all, those annoying trips to the printer have ended. 


Source: Adapted from Thomas Wailgum, “Business Intelligence and On-Demand: The Perfect Marriage?” CIO Magazine, 
March 27, 2008. 


We discussed data mining and data warehouses in Chapter 5 as vital tools for organ- 
izing and exploiting the data resources of a company. Thus, data mining’s main pur- 
pose is to provide decision support to managers and business professionals through a 
process referred to as knowledge discovery. Data mining software analyzes the vast stores 
of historical business data that have been prepared for analysis in corporate data ware- 
houses and tries to discover patterns, trends, and correlations hidden in the data that 
can help a company improve its business performance. 

Data mining software may perform regression, decision tree, neural network, clus- 
ter detection, or market basket analysis for a business. See Figure 9.18. The data min- 
ing process can highlight buying patterns, reveal customer tendencies, cut redundant 


370 © Module III / Business Applications 


FIGURE 9.18 | ka Field versus Field -- ( fields stats } 
Data mining software helps | 
discover patterns in business 
data, like this analysis of 
customer demographic 
information. 


Source: Courtesy of XpertRule Software. 


costs, or uncover unseen profitable relationships and opportunities. For example, 
many companies use data mining to find more profitable ways to perform successful 
direct mailings, including e-mailings, or discover better ways to display products in a 
store, design a better e-commerce Web site, reach untapped profitable customers, or 
recognize customers or products that are unprofitable or marginal. 

Market basket analysis (MBA) is one of the most common and useful types of data 
mining for marketing. The purpose of market basket analysis is to determine what 
products customers purchase together with other products. MBA takes its name from 
the concept of customers throwing all their purchases into a shopping cart (a market 
basket) during grocery shopping. It can be very helpful to a retailer or any other com- 
pany to know what products people purchase as a group. A store could use this infor- 
mation to place products frequently sold together into the same area, and a catalog or 
World Wide Web merchant could use it to determine the layouts of a catalog and or- 
der form. Direct marketers could use the basket analysis results to determine what 
new products to offer their prior customers. 

In some cases, the fact that items are sold together is obvious; every fast-food res- 
taurant asks their customers “Would you like fries with that?” whenever a customer 
orders a sandwich. Sometimes, however, the fact that certain items would be sold to- 
gether is far from obvious. A well-known example is the relationship between beer and 
diapers. A supermarket performing a basket analysis discovered that diapers and beer 
sell well together on Thursdays. Although the result makes some sense—couples stock 
up on supplies for themselves and for their children before the weekend starts—it’s far 
from intuitive. The strength of market basket analysis is as follows: By using computer 
data mining tools, it’s not necessary for a person to think of what products consumers 
would logically buy together; instead, the customers’ sales data speak for themselves. 
This is a good example of data-driven marketing. 
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Consider some of the typical applications of MBA: 


e Cross Selling. Offer the associated items when customer buy any items from 
your store 


e Product Placement. Items that are associated (such as bread and butter, 
tissues and cold medicine, potato chips and beer) can be put near to each other. 
If the customers see them, it has higher probability that they will purchase 
them together. 


e Affinity Promotion. Design the promotional events based on associated 
products. 


e Survey Analysis. The fact that both independent and dependent variables of 
market basket analysis are nominal (categorical) data type makes MBA very use- 
ful to analyze questionnaire data. 


e Fraud Detection. Based on credit card usage data, we may be able to detect 
certain purchase behaviors that can be associated with fraud. 


e Customer Behavior. Associating purchase with demographic, and socio- 
economic data (such as age, gender, and preference) may produce very useful 
results for marketing. 


Once it is known that customers who buy one product are likely to buy another, it 
is possible for a company to market the products together or make the purchasers of 
one product target prospects for another. If customers who purchase diapers are al- 
ready likely to purchase beer, they’ll be even more likely to buy beer if there happens 
to be a beer display just outside the diaper aisle. Likewise, if it’s known that customers 
who buy a sweater from a certain mail-order catalog have a propensity toward buying 
a jacket from the same catalog, sales of jackets can be increased by having the tele- 
phone representatives describe and offer the jacket to anyone who calls in to order the 
sweater. By targeting customers who are already known to be likely buyers, the effec- 
tiveness of a given marketing effort is significantly increased—regardless of whether 
the marketing takes the form of in-store displays, catalog layout design, or direct of- 
fers to customers. 


Boston Celtics executives are taking advantage of a data analytics tool in their annual 
January task of setting prices for the 18,600 seats in TD Banknorth Garden. The 
NBA team installed the StratBridge.net tool from StratBridge Inc. to monitor con- 
sumer demand through real-time displays of sold and available seats in its home 
arena. Now team officials are also using the tool during the month-long project to 
set base ticket prices for the next season. 

The new tool has helped the organization quickly develop promotions and sales 
strategies to fill available seats and to analyze revenue based on long-term sales 
trends, says Daryl Morey, senior vice president of operations and information for 
the Celtics. “Until we had this tool, it was very difficult to create dynamic packages 
because our ticket providers didn’t have a rapid way to see which seats were open,” 
Morey says. “Now we can actually see in real time every single seat and how much 
it is sold for.” 

‘The basketball team has already seen a “seven figure” return on investment fueled 
by five-figure revenue boosts every one to two weeks since it began to use Strat- 
Bridge.net in 2006, according to Morey. Before using data analytics, sales executives 
used Excel spreadsheets to adjust pricing. In that system, pricing could be adjusted 
only for all the seats within each of 12 large sections in the arena. “It was a leap of 
faith looking at the data at that level,” says Morey. 
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Using the analytics tool, for example, planners found that ticket buyers tended 
to favor aisle seating in certain sections; as a result, the team now focuses on mar- 
keting the inner seats. Now, in the ticket office, group- and individual-ticket sellers 
can see an image of the arena seating chart on a plasma TV screen with different 
color blocks indicating real-time availability and revenue for home games. Sales 
executives can access this information from their desktops to study buying trends 
and design new promotions. 

StratBridge.net extracts data from internal and external sources and displays it 
visually in Internet browsers and Microsoft Office applications. The analysis can be 
presented to users in Word, Excel, PowerPoint, and Adobe PDF files. Bill Hostmann, 
an analyst at Gartner Inc., said companies trying to market “perishable” products 
like basketball games, hotel rooms, or live television broadcasts are beginning to 
turn to this type of data analysis, which was first perfected in the airline industry. 
“You’re seeing more and more of this kind of analytical functionality being embed- 
ded in the application itself as a part of the process, as opposed to being done on a 
quarterly or weekly basis,” Hostmann said. “The ROI is very fast on these types of 
applications.” 


Source: Adapted from Heather Havenstein, “Celtics Turn to Data Analytics Tool for Help Pricing Tickets,” 
Computerworld, January 6, 2006. 


Executive information systems (EIS) are information systems that combine many of 
the features of management information systems and decision support systems. 
When they were first developed, their focus was on meeting the strategic informa- 
tion needs of top management. Thus, the first goal of executive information sys- 
tems was to provide top executives with immediate and easy access to information 
about a firm’s critical success factors (CSFs), that is, key factors that are critical to 
accomplishing an organization’s strategic objectives. For example, the executives 
of a retail store chain would probably consider factors such as its e-commerce 
versus traditional sales results or its product line mix to be critical to its survival 
and success. 

Yet managers, analysts, and other knowledge workers use executive information 
systems so widely that they are sometimes humorously called “everyone’s information 
systems.” More popular alternative names are enterprise information systems (EIS) 
and executive support systems (ESS). These names also reflect the fact that more fea- 
tures, such as Web browsing, e-mail, groupware tools, and DSS and expert system 
capabilities, are being added to many systems to make them more useful to managers 
and business professionals. 


In an EIS, information is presented in forms tailored to the preferences of the execu- 
tives using the system. For example, most executive information systems emphasize 
the use of a graphical user interface, as well as graphics displays that can be customized 
to the information preferences of executives using the EIS. Other information presen- 
tation methods used by an EIS include exception reporting and trend analysis. The 
ability to drill down, which allows executives to retrieve displays of related information 
quickly at lower levels of detail, is another important capability. 

Figure 9.19 shows one of the displays provided by the Web-enabled Hyperion 
executive information system. Notice that this display is simple and brief, and note 
how it provides users of the system with the ability to drill down quickly to lower lev- 
els of detail in areas of particular interest to them. In addition to the drill-down capa- 
bility, the Hyperion EIS emphasizes trend analysis and exception reporting. Thus, a 
business user can quickly discover the direction in which key factors are heading and 
the extent to which critical factors are deviating from expected results. 


FIGURE 9.19 

This Web-based executive 
information system provides 
managers and business 
professionals with a variety 
of personalized information 
and analytical tools for 
decision support. 


Southwest Airlines 
and Motorola 
Inc.: The Value of 
EIS for Everyone 


Chapter 9 / Decision Support Systems @ 373 


Intranet Nostan > w ~e + Swie Seapine es 


lado Home 


Arneve cements 


T 
ave! Ademory a} 


Blood Lrtve Volumen Meesec 


Main | atereria  onatruction Recent News 


Winny Tors 
Crone Action weer 


Reaching New Heights 


Press Rebate Party Tomer wer Beading anae 
Dus wasan, a mening nee Neastines as ora ot ne pas 
m eee 
Other News 
Awards & Recopnmtion 


Essential Links Be one a i ease 


1 apyg Powe 
Buemere Conduct Gundeinen 

Lopaste Trae 

Meaca Beretta | ompanson Identity Youur Shiite 

a cate 

eee 


industry News 


mo 


Source: Courtesy of IBM. 


Executive information systems have spread into the ranks of middle management 
and business professionals as their feasibility and benefits have been recognized and as 
less expensive systems for client/server networks and corporate intranets became avail- 
able. For example, one popular EIS software package reports that only 3 percent of its 
users are top executives. 


The executive information systems (EIS) of the 1980s stayed in the executive suite 
and provided fancy pie charts of financial data. Now these business intelligence tools 
have found a new home in the cubicles. Dashboards aren’t just for financial data any- 
more. “We are now seeing them all over the enterprise, and for a variety of reasons,” 
says John Hagerty, an analyst at AMR Research Inc. in Boston. More than half of the 
135 companies he recently surveyed are implementing dashboards, which are also 
spreading into various nonfinancial departments. 

“At Southwest Airlines, they call them ‘cockpits,’ and they’re specialized so that 
the guy in charge of putting peanuts on airplanes gets a different view than the guy 
who’s in charge of purchasing jet fuel,” says John Kopcke, chief technology officer at 
software vendor Hyperion Solutions Corp. 

The payoff is that delivering dashboard data to frontline workers puts business 
intelligence in the hands of people who can exploit it to make money-saving deci- 
sions on a daily basis. Motorola Inc., for example, deployed business intelligence 
software from Informatica Corp. in Redwood City, California, to about 200 desktops 
in various purchasing offices. Falgun Patel, senior manager for sourcing systems at 
Schaumburg, Illinois—based Motorola, says his dashboard gives him unprecedented 
access to purchasing information. 

“We got the system up and running in mid-2002,” says Patel. “Prior to that, we 
had to pull information from a variety of spreadsheets and custom databases from 
locations all over the globe.” In fact, this is still the case, but now Informatica’s 
software does the pulling, and sourcing officers like Patel can get instant access to 
sophisticated metrics. 

“Tt used to take 20 days for one of our indirect purchasing officers to collect glo- 
bal stats,” says Chet Phillips, IT director for business intelligence at Motorola. “Now 
it takes minutes.” Patel says the result is smarter, faster decisions. “On my dashboard, 
I can immediately see our global spend with a particular supplier,” he explains. “I can 
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Enterprise 
Portals and 
Decision 
Support 


Enterprise 
Information Portals 


slice the data in a number of ways—various charts, historical records, purchases by 
departments, etc. This gives me exactly what I need to negotiate a better deal with 
the supplier.” 

He says the dashboard also allows him to be more proactive. “By combining the 
purchasing analytics on my desktop with current market conditions, I can determine 
whether it is better to negotiate for a commodity or go ahead and lock in a supply,” 
Patel says. The result is a fabulous return on investment. “We estimate that this sys- 
tem saved us about $15 million a month in 2002,” says Phillips. 


Source: Adapted from Mark Leon, “Business-Intelligence Dashboards Get Democratic,” Computerworld, June 16, 2003. 


Don’t confuse portals with the executive information systems that have been used in 
some industries for many years. Portals are for everyone in the company, and not just 
for executives. You want people on the front lines making decisions using browsers 
and portals rather than just executives using specialized executive information system 
software. 


We mentioned previously in this chapter that major changes and expansions are 
taking place in traditional MIS, DSS, and EIS tools for providing the information and 
modeling managers need to support their decision making. Decision support in busi- 
ness is changing, driven by rapid developments in end-user computing and network- 
ing; Internet and Web technologies; and Web-enabled business applications. One of 
the key changes taking place in management information and decision support sys- 
tems in business is the rapid growth of enterprise information portals. 


A user checks his e-mail, looks up the current company stock price, checks his available 
vacation days, and receives an order from a customer—all from the browser on his desktop. 
That is the next-generation intranet, also known as a corporate or enterprise information 
portal. With it, the browser becomes the dashboard to daily business tasks. 


An enterprise information portal (EIP) is a Web-based interface and integration of 
MIS, DSS, EIS, and other technologies that give all intranet users and selected ex- 
tranet users access to a variety of internal and external business applications and ser- 
vices. For example, internal applications might include access to e-mail, project Web 
sites, and discussion groups; human resources Web self-services; customer, inventory, 
and other corporate databases; decision support systems; and knowledge manage- 
ment systems. External applications might include industry, financial, and other In- 
ternet news services; links to industry discussion groups; and links to customer and 
supplier Internet and extranet Web sites. Enterprise information portals are typically 
tailored or personalized to the needs of individual business users or groups of users, 
giving them a personalized digital dashboard of information sources and applications. 
See Figure 9.20. 

The business benefits of enterprise information portals include providing more 
specific and selective information to business users, providing easy access to key cor- 
porate intranet Web site resources, delivering industry and business news, and provid- 
ing better access to company data for selected customers, suppliers, or business 
partners. Enterprise information portals can also help avoid excessive surfing by em- 
ployees across company and Internet Web sites by making it easier for them to receive 
or find the information and services they need, thus improving the productivity of a 
company’s workforce. 

Figure 9.21 illustrates how companies are developing enterprise information 
portals as a way to provide Web-enabled information, knowledge, and decision 
support to their executives, managers, employees, suppliers, customers, and other 


FIGURE. 9.20 


An enterprise information 
portal can provide a 
business professional with 

a personalized workplace 

of information sources, 
administrative and analytical 
tools, and relevant business 
applications. 


FIGURE 9.21 


The components of this 
enterprise information 
portal identify it as a Web- 
enabled decision support 
system that can be 
personalized for executives, 
managers, employees, 
suppliers, customers, and 
other business partners. 
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business partners. The enterprise information portal is a customized and personal- 
ized Web-based interface for corporate intranets, which gives users easy access to a 
variety of internal and external business applications, databases, and services. For 
example, the EIP in Figure 9.20 might give a qualified user secure access to DSS, 
data mining, and OLAP tools; the Internet and the Web; the corporate intranet; 
supplier or customer extranets; operational and analytical databases; a data ware- 
house; and a variety of business applications. 


Knowledge We introduced knowledge management systems in Chapter 2 as the use of infor- 

Mana gem ent mation technology to help gather, organize, and share business knowledge within 
an organization. In many organizations, hypermedia databases at corporate intranet 

Systems Web sites have become the knowledge bases for storage and dissemination of busi- 
ness knowledge. This knowledge frequently takes the form of best practices, poli- 
cies, and business solutions at the project, team, business unit, and enterprise levels 
of the company. 

For many companies, enterprise information portals are the entry to corporate 
intranets that serve as their knowledge management systems. That’s why such portals 
are called enterprise knowledge portals by their vendors. Thus, enterprise knowledge 
portals play an essential role in helping companies use their intranets as knowledge man- 
agement systems to share and disseminate knowledge in support of business decision 
making by managers and business professionals. See Figure 9.22. Now let’s look at an 
example of a knowledge management system in business. 


FIGURE 9.22 This example of the capabilities and components of an enterprise knowledge portal emphasizes its use 
as a Web-based knowledge management system. 
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In 1997, with the Cold War well behind them, thousand of engineers who had helped 
design and maintain the B-2 bomber were asked to leave the integrated systems sec- 
tor of Northrop Grumman. As the nearly 12,000 workers filed out the door, leaving 
only 1,200 from a staff of 13,000, they took with them years of experience and in- 
depth knowledge about what was considered at the time to be the most complex 
aircraft ever built. 

Northrop Grumman knew it had to keep enough of that know-how to support 
the division’s long-term maintenance of the B-2 bomber, so a newly formed knowl- 
edge management team identified top experts and videotaped interviews with them 
before they left. But it was hard to get everything in a single interview, says Scott 
Shaffar, Northrop Grumman’s director of knowledge management for the Western 
region of the integrated systems sector. “We did lose some of that knowledge,” 
says Shaffar. “In an exit interview, you can capture certain things, but not a lifetime 
of experience.” 

Several years later, the company uses a variety of tools to retain and transfer 
knowledge from its engineers—well before they retire. Shaffar and his team have put 
in place document management systems and common work spaces that record how 
an engineer did his job for future reference. They have started programs that bring 
together older and younger engineers across the country to exchange information 
via e-mail or in person about technical problems, and they are using software that 
helps people find experts within the company. 

While most companies won’t face the sudden departure of thousands of skilled 
workers, as Northrop Grumman did in the late 1990s, they and government agencies 
alike will need to prepare for the loss of important experience and technical knowl- 
edge as the baby boomer generation gets ready to retire over the coming decade. By 
2010, more than half of all workers in the United States will be over 40. While most 
top managers are aware that they’Il soon have a lot of workers retiring, few are doing 
much to prepare for the event. That’s often because it’s hard to quantify the cost of 
losing knowledge. 

At Northrop Grumman, times have changed since its massive downsizing in 
the 1990s. Although a large percentage of its workforce is nearing retirement, the 
average age of employees has dropped from the high 40s to the mid 40s in the past 
four years since the company started hiring more college grads. Shaffar says he is 
now working on balancing the more gradual transfer of knowledge from older to 
younger workers, with the need to capture some crucial expertise quickly before 
it’s too late. For example, Northrop Grumman engineers who are competing on a 
proposal for a “crew exploration vehicle,” which is being designed to replace the 
space shuttle and travel to the moon (and eventually to Mars), met with a group of 
retirees who worked on the Apollo program that sent men to the moon more than 
35 years ago. 

Using a PC program called Quindi and a camera attached to a laptop, a facilitator 
recorded retirees telling stories about how they grappled with the technical problems 
of sending a man to the moon. These tales will be available as Web pages for engi- 
neers working on this project. Shaffar acknowledges that employees would rather go 
to another person than a system for advice, but he says the exercise helped capture 
knowledge that otherwise soon would be gone. 

Most important, Shaffar has learned that the problem goes beyond looking 
at what skills you have right now. “There have always been new generations, 
and we’re not any different in that way,” he says. “Mentoring, training and passing 
on knowledge is not something you can do at the last minute. You have to plan 
ahead.” 


Source: Adapted from Susannah Patton, “How to Beat the Baby Boomer Retirement Blues,” CIO Magazine, 
January 15, 2006. 
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Artificial intelligence (AI) technologies are being used in a variety of ways to improve 
the decision support provided to managers and business professionals in many compa- 
nies. See Figure 9.23. For example: 


Al-enabled applications are at work in information distribution and retrieval, database 
mining, product design, manufacturing, inspection, training, user support, surgical 
planning, resource scheduling, and complex resource management. 

Indeed, for anyone who schedules, plans, allocates resources, designs new products, uses 
the Internet, develops software, is responsible for product quality, is an investment profes- 
sional, heads up IT, uses IT, or operates in any of a score of other capacities and arenas, 
AI technologies already may be in place and providing competitive advantage. 


Read the Real World Case on the next page. We can learn a lot about artificial 
intelligence applications in business from this example. 


What is artificial intelligence? Artificial intelligence (Al) is a field of science and tech- 
nology based on disciplines such as computer science, biology, psychology, linguistics, 
mathematics, and engineering. The goal of AI is to develop computers that can simu- 
late the ability to think, as well as see, hear, walk, talk, and feel. A major thrust of arti- 
ficial intelligence is the simulation of computer functions normally associated with 
human intelligence, such as reasoning, learning, and problem solving, as summarized 
in Figure 9.24. 

Debate has raged about artificial intelligence since serious work in the field began 
in the 1950s. Technological, moral, and philosophical questions about the possibility 
of intelligent, thinking machines are numerous. For example, British AI pioneer Alan 
‘Turing in 1950 proposed a test to determine whether machines could think. Accord- 
ing to the Turing test, a computer could demonstrate intelligence if a human inter- 
viewer, conversing with an unseen human and an unseen computer, could not tell 
which was which. Although much work has been done in many of the subgroups that 
fall under the AI umbrella, critics believe that no computer can truly pass the Turing 
test. They claim that it is just not possible to develop intelligence to impart true hu- 
manlike capabilities to computers, but progress continues. Only time will tell whether 
we will achieve the ambitious goals of artificial intelligence and equal the popular im- 
ages found in science fiction. 

One derivative of the Turing test that is providing real value to the online com- 
munity is a CAPTCHA. A CAPTCHA (Completely Automated Public Turing test 
to tell Computers and Humans Apart) is a type of challenge-response test used in a 
wide variety of computing applications to determine that the user is really a human 
and not a computer posing as one. A CAPTCHA is sometimes described as a reverse 
‘Turing test because it is administered by a machine and targeted to a human, in con- 
trast to the standard ‘Turing test that is typically administered by a human and tar- 
geted to a machine. The process involves one computer (such as a server for a retail 
Web site) asking a user to complete a simple test that the computer is able to generate 
and grade. Because other computers are unable to solve the CAPTCHA, any user 
entering a correct solution is presumed to be human. A common type of CAPTCHA 
requires that the user type the letters of a distorted image, sometimes with the addi- 
tion of an obscured sequence of letters or digits that appears on the screen. No doubt 
you have seen this when registering for a new account with a merchant or checking 
out from an online purchase. Figure 9.25 shows several common examples of 


CAPTCHA patterns. 


REAL WORLD 


CASE 


f necessity is the mother of invention, then capitalism is 
surely the mother of innovation. Companies are being driven 
to develop unique applications of undeniably cool technolo- 
gies by the drive to create a sustainable competitive advantage. 
“At the end of the day, as cool as this thing we’ve developed is, 
it’s a tool,” says Stephanie Wernet, Goodyear’s CIO. “It is meant 
to serve a business end. In our case, this tool lets us put out 
new, more innovative products faster than the competition.” 
Working with Sandia National Labs, Goodyear’s IT de- 
partment developed software to design and test tires virtually. 
In the past, the company built physical prototypes and tested 
them by driving thousands of miles on tracks. Using a mathe- 
matical model, the software simulates tire behavior in different 
driving conditions so that the designer can see how the tire gets 
pushed, pulled, and stretched as it rolls down a road, hits bumps, 
turns corners, screeches to a halt, and grips the road in wet, dry, 
and icy conditions. Goodyear wanted to shorten that time to 
get its products to market more quickly. Three research and 
development employees advanced the idea of testing prototypes 
using computer simulations, which could do the job faster. 
The company had never done simulations but figured 
initial investments and subsequent maintenance costs were 
worth the payoff. Goodyear’s cost of goods sold as well as its 
sales decreased by 2.6 percent from 2003 to 2004, the year its 
first fully simulated tires hit the market. Meanwhile, the re- 
search and development (R&D) budget for tire testing and 
design decreased by 25 percent. 
Custom-built software runs on hundreds of processors 
on hundreds of Linux computers in a massively parallel com- 
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Advanced technologies such as artificial 
intelligence, mathematical simulations, and 
robotics can have dramatic impacts on both 
business processes and financial results. 


Source: © Charles Smith/Corbis. 
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puting environment. Goodyear invested more than $6 mil- 
lion to build this high-powered computing environment. It 
plans to expand and upgrade its Linux clusters to meet busi- 
ness demands for new tires and to improve the fidelity of its 
virtual tests. The company believes it is the first tire maker 
to use computers to design and test its wheels. Although the 
auto industry has done computer-assisted design work since 
the 1980s, the technology had not been applied to tires be- 
cause their malleable materials made simulation difficult. 

Designers can perform 10 times more tests, reducing a 
new tire’s time to market from two years to as little as nine 
months. Goodyear attributes its sales growth from $15 bil- 
lion in 2003 to $20 billion in 2005 to new products intro- 
duced as a result of this change. 

Public utility JEA uses neural network technology to 
create an artificial intelligence system it has recently imple- 
mented. The system automatically determines the optimal 
combinations of oil and natural gas the utility’s boilers need 
to produce electricity cost-effectively, given fuel prices and 
the amount of electricity required. It also ensures that the 
amount of nitrous oxide (N,O) emitted during the genera- 
tion process does not exceed government regulations. 

JEA needed to decrease operating expenses, in particular 
fuel costs, as oil and gas prices began their precipitous ascent 
in 2002. Forty percent of JEA’s $1.3 billion budget goes to the 
purchase of oil and gas to power its boilers, so a small change 
in the way electricity is produced could add millions of dollars 
to the bottom line. Neural network technology models the 
process of producing electricity. Optimization software from 
NeuCo determines the right combinations of oil and gas to 
produce electricity at low cost while minimizing emissions. 

JEA, which serves more than 360,000 customers in Jack- 
sonville and three neighboring Florida counties, is the first 
utility in the world to apply neural network technology to the 
production of electricity in circulating fluidized-bed boilers. It 
built a system that makes decisions based on historical operat- 
ing data and as many as 100 inputs associated with the com- 
bustion process, including air flows and megawatt outputs. 
The system learns which fuel combinations are optimal by 
making adjustments to the boiler in real time; it also forecasts 
what to do in the future based on specific fuel cost assump- 
tions. “We had issues with oil prices. At the same time, gas 
prices went from $4 a BTU to over $14. We need to use gas 
because it decreases emissions. This solution helped us bal- 
ance all of those items,” says Wanyonyi Kendrick, JEA’s CIO. 

The project, which IT drove, cost $800,000 and paid for 
itself in eight weeks. The system reduced the quantity of natu- 
ral gas that is used to control N,O emissions by 15 percent, an 
estimated annual savings of $4.8 million. With natural gas 
prices at $11 per BTU, JEA expects to save $13 million on 
fuel in 2006. What’s more, JEA has discovered it can use the 
new technology applications for its water business. 

The Ohio State University Medical Center (OSUMC) re- 
placed its overhead rail transport system with 46 self-guided 
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robotic vehicles to move linens, meals, trash, and medical sup- 
plies throughout the 1,000-bed hospital. The robots do not in- 
teract with patients; they carry out routine tasks that hospital 
staff used to do. Faced with declining revenue and rising costs, 
OSUMC needed to save money while improving patient care. 
A steering committee comprising IT, other hospital depart- 
ments, consultants, and vendors drove this project. They con- 
vinced medical staff of its value by demonstrating the technology 
and communicating how it improved working conditions and 
patient care. Materials transport was identified as a place to cut 
costs since the hospital needed to upgrade the existing system. 

The robots, made by FMC Technologies, are guided by a 
wireless infrared network from Cisco Systems. The network 
is embedded in corridor walls and elevators designed for the 
robots’ use. Three Windows servers linked to the network 
maintain a database of robot jobs and traffic patterns. 
OSUMC is the first hospital in the United States to imple- 
ment an infrared-guided automated system for transporting 
materials. Hospital staff use a touch-screen computer con- 
nected to a server to call a robot when, for example, a linen 
cart needs to go to the laundry room. To get from point A to 
point B, the robots rely on a digital map of the medical center 
programmed into their memory; they also track their move- 
ments against the number of times their wheels rotate in a 
full circle. So if it takes a robot 1,000 wheel revolutions to get 
from a building’s kitchen to the sixth floor, and its wheels 
have moved in 500 revolutions, the robot knows it is halfway 
there. If a robot loses network contact, it shuts down. 

The $18 million system is expected to save the hospital 
approximately $1 million a year over the next 25 years. Since 
it went live in 2004, OSUMC has saved $27,375 annually on 
linen delivery alone. OSUMC’s CIO Detlev Smaltz says the 
system improves patient care by freeing up personnel: “If we 
can take mundane jobs like taking out the trash off of our 
employees and give them more time to do the things they 
came into the health-care profession to do, then that’s an 
added benefit of the system.” 


CASE STUDY QUESTIONS 


1. Consider the outcomes of the projects discussed in the 
case. In all of them, the payoffs are both larger and 
achieved more rapidly than in more traditional system 
implementations. Why do you think this is the case? 
How are these projects different from others you have 
come across in the past? What are those differences? 
Provide several examples. 


2. How do these technologies create business value for the 
implementing organizations? In which ways are these 
implementations similar in how they accomplish this, 
and how are they different? Use examples from the case 
to support your answer. 


3. In all of these examples, companies had an urgent need 
that prompted them to investigate these radical, new 
technologies. Do you think the story would have been 
different had the companies been performing well al- 
ready? Why or why not? To what extent are these innova- 
tions dependent on the presence of a problem or crisis? 


Monsanto’s IT department created software to identify 
genes that indicate a plant’s resistance to drought, herbicides, 
and pests; those genetic traits are used to predict which plants 
breeders should reproduce to yield the healthiest, most boun- 
tiful crops. The software crunches data from breeders world- 
wide and presents them in a colorful, easy-to-comprehend 
fashion. By pinpointing the best breeding stock, it increases 
breeders’ odds of finding a commercially viable combination 
of genetic traits from one in a trillion to one in five. Monsan- 
to’s global breeding organization drove the project. 

When the patent expired for Roundup, Monsanto’s sig- 
nature weed killer, the St. Louis company invested in grow- 
ing its business involving seeds and genetic traits, which 
comprises more than half of its $6.3 billion revenue and 
$255 million profits in 2005. Monsanto believes it can sell 
more corn, soybean, and cotton seeds if farmers know its 
seeds will produce heartier crops and require fewer sprays of 
insecticide and herbicide, thus reducing costs. 

Monsanto’s scientists use the software to engineer seeds 
that effectively resist drought and pests and to produce plants 
that are healthier for humans and animals to eat. They do it 
by implanting those seeds with the genetic material that 
makes a plant resist insects or produce more protein. What 
would Gregor Mendel, the father of genetics, think of this? 
“This is really different from the way breeders bred their 
crops,” says Monsanto CIO Mark Showers. “They didn’t 
have this level of molecular detail to determine and select 
plants they wanted to move forward from year to year.” 

Monsanto reaps the benefit of its software but wouldn’t re- 
veal development costs. Earnings per share (EPS) on an ongo- 
ing basis grew from $1.59 to $2.08, or 30 percent, from 2004 to 
2005. Its EPS is expected to grow by 20 percent more in 2006. 
“Tn the last four or five years, we’ve had a marked improvement 
in taking market share from our competition. We’ve grown 
our share at a couple of points per year,” says Showers. 


Source: Adapted from Meridith Levinson, “IT Innovation: Robots, Super- 
computers, AI and More,” CIO Magazine, August 15, 2006. 


REAL WORLD ACTIVITIES 


1. Choose one of the companies introduced in the case 
and search the Internet to update the current status of 
their project. Also take a look at their competitors, and 
discover how they have responded to the introduction 
of the developments mentioned in the case. Have they 
attempted to imitate them? 


2. As these technologies go beyond the capacity and abili- 
ties of human beings, what is the role of people in the 
processes they affect? Do you think these technologies 
empower us by allowing us to overcome our limitations 
and expand our range of possibilities? Instead, do they 
relegate people to the role of uncritically accepting the 
outcomes of these processes? Break into small groups 
to discuss these issues, and note which arguments that 
support one or the other position arise as a result. 


FIGURE 9.24 


Some of the attributes of 
intelligent behavior. AI is 
attempting to duplicate 
these capabilities in 
computer-based systems. 


The Domains of 


Artificial Intelligence 


FIGURE 9.25 
Examples of typical 
CAPTCHA patterns that 
can be easily solved by 
humans but prove difficult 
to detect by a computer. 
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Attributes of Intelligent Behavior 


e Think and reason. 


e Use reason to solve problems. 


e Learn or understand from experience. 


e Acquire and apply knowledge. 


e Exhibit creativity and imagination. 


© Deal with complex or perplexing situations. 


e@ Respond quickly and successfully to new situations. 


e Recognize the relative importance of elements in a situation. 


e Handle ambiguous, incomplete, or erroneous information. 


Figure 9.26 illustrates the major domains of AI research and development. Note that 
AI applications can be grouped under three major areas—cognitive science, robotics, 
and natural interfaces—though these classifications do overlap, and other classifica- 
tions can be used. Also note that expert systems are just one of many important AI 
applications. Let’s briefly review each of these major areas of AI and some of their cur- 
rent technologies. Figure 9.27 outlines some of the latest developments in commercial 
applications of artificial intelligence. 


Cognitive Science. This area of artificial intelligence is based on research in biology, 
neurology, psychology, mathematics, and many allied disciplines. It focuses on re- 
searching how the human brain works and how humans think and learn. The results 
of such research in human information processing are the basis for the development of a 
variety of computer-based applications in artificial intelligence. 

Applications in the cognitive science area of AI include the development of expert 
systems and other knowledge-based systems that add a knowledge base and some reason- 
ing capability to information systems. Also included are adaptive learning systems that 
can modify their behaviors on the basis of information they acquire as they operate. 
Chess-playing systems are primitive examples of such applications, though many more 
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FIGURE 9.26 


The major application areas 
of artificial intelligence. 
Note that the many 
applications of AI can be 
grouped into the three 
major areas of cognitive 
science, robotics, and 
natural interfaces. 
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applications are being implemented. Fuzzy logic systems can process data that are in- 
complete or ambiguous, that is, fuzzy data. Thus, they can solve semistructured prob- 
lems with incomplete knowledge by developing approximate inferences and answers, 
as humans do. Neural network software can learn by processing sample problems and 


FIGURE 9.27 


Examples of some of the 
latest commercial Decision Support 
applications of AI. 


Commercial Applications of AI 


e Intelligent work environment that will help you capture the why as well as the what of 
engineered design and decision making. 


e Intelligent human-computer interface (HCI) systems that can understand spoken lan- 
guage and gestures, and facilitate problem solving by supporting organizationwide 
collaborations to solve particular problems. 


e Situation assessment and resource allocation software for uses that range from airlines 
and airports to logistics centers. 


Information Retrieval 
e Al-based intranet and Internet systems that distill tidal waves of information into sim- 
ple presentations. 


e Natural language technology to retrieve any sort of online information, from text to 
pictures, videos, maps, and audio clips, in response to English questions. 


e Database mining for marketing trend analysis, financial forecasting, maintenance cost 
reduction, and more. 


Virtual Reality 
e X-ray-like vision enabled by enhanced-reality visualization that allows brain surgeons to 
“see through” intervening tissue to operate, monitor, and evaluate disease progression. 


e Automated animation interfaces that allow users to interact with virtual objects via 
touch (e.g., medical students can “feel” what it’s like to suture severed aortas). 


Robotics 
e Machine-vision inspections systems for gauging, guiding, identifying, and inspecting 
products and providing competitive advantage in manufacturing. 


e Cutting-edge robotics systems, from microrobots and hands and legs to cognitive 
robotic and trainable modular vision systems. 


Artificial 
Intelligence Gets 
Down to Business 
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their solutions. As neural nets start to recognize patterns, they can begin to program 
themselves to solve such problems on their own. Genetic algorithm software uses 
Darwinian (survival of the fittest), randomizing, and other mathematics functions to 
simulate evolutionary processes that can generate increasingly better solutions to 
problems. In addition, intelligent agents use expert system and other AI technologies to 
serve as software surrogates for a variety of end-user applications. 


Robotics. AI, engineering, and physiology are the basic disciplines of robotics. This 
technology produces robot machines with computer intelligence and computer- 
controlled, humanlike physical capabilities. This area thus includes applications designed 
to give robots the powers of sight, or visual perception; touch, or tactile capabilities; dex- 
terity, or skill in handling and manipulation; locomotion, or the physical ability to move 
over any terrain; and navigation, or the intelligence to find one’s way to a destination. 


Natural Interfaces. The development of natural interfaces is considered a major area 
of AI applications and is essential to the natural use of computers by humans. For ex- 
ample, the development of natural languages and speech recognition are major thrusts 
of this area of AI. Being able to talk to computers and robots in conversational human 
languages and have them “understand” us as easily as we understand each other is a 
goal of AI research. This goal involves research and development in linguistics, psy- 
chology, computer science, and other disciplines. Other natural interface research ap- 
plications include the development of multisensory devices that use a variety of body 
movements to operate computers, which is related to the emerging application area of 
virtual reality. Virtual reality involves using multisensory human-computer interfaces 
that enable human users to experience computer-simulated objects, spaces, activities, 
and “worlds” as if they actually exist. Now, let’s look at some examples of how AI is 
becoming increasingly more relevant in the business world. 


‘Today, AI systems can perform useful work in “a very large and complex world,” says 
Eric Horvitz, an AI researcher at Microsoft Research (MSR). “Because these small 
software agents don’t have a complete representation of the world, they are uncertain 
about their actions. So they learn to understand the probabilities of various things 
happening, they learn the preferences of users and costs of outcomes and, perhaps 
most important, they are becoming self-aware.” 

These abilities derive from something called machine learning, which is at the 
heart of many modern AI applications. In essence, a programmer starts with a crude 
model of the problem he’s trying to solve but builds in the ability for the software to 
adapt and improve with experience. 

Speech recognition software gets better as it learns the nuances of your voice, 
for example, and over time Amazon.com more accurately predicts your preferences 
as you shop online. Machine learning is enabled by clever algorithms, of course, 
but what has driven it to prominence in recent years is the availability of huge 
amounts of data, both from the Internet and, more recently, from a proliferation of 
physical sensors. 

For instance, Microsoft Research has combined sensors, machine learning, and 
analysis of human behavior in a road traffic prediction model. Predicting traffic bot- 
tlenecks would seem to be an obvious and not very difficult application of sensors 
and computer forecasting. But MSR realized that most drivers hardly need to be 
warned that the interstate heading out of town will be jammed at 5 p.m. on Monday. 
What they really need to know is where and when anomalies, or “surprises,” are 
occurring and, perhaps more important, where they will occur. So MSR built a 
“surprise forecasting” model that learns from traffic history to predict surprises 
30 minutes in advance based on actual traffic flows captured by sensors. In tests, it 
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FIGURE 9.28 
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has been able to predict about 50% of the surprises on roads in the Seattle area, and 
it is in use now by several thousand drivers who receive alerts on their Windows 
Mobile devices. 

Few organizations need to make sense of as much data as search engine compa- 
nies do. For example, if a user searches Google for “toy car” and then clicks on a 
Wal-Mart ad that appears at the top of the results, what’s that worth to Wal-Mart, 
and how much should Google charge for that click? The answers lie in an AI spe- 
cialty that employs “digital trading agents,” which companies like Wal-Mart and 
Google use in automated online auctions. 

Michael Wellman, a University of Michigan professor and an expert in these 
markets, explains: “There are millions of keywords, and one advertiser may be inter- 
ested in hundreds or thousands of them. They have to monitor the prices of the 
keywords and decide how to allocate their budget, and it’s too hard for Google or 
Yahoo to figure out what a certain keyword is worth. They let the market decide that 
through an auction process.” 

When the “toy car” query is submitted, in a fraction of a second Google looks up 
which advertisers are interested in those keywords, then looks at their bids and de- 
cides whose ads to display and where to put them on the page. “The problem I’m 
especially interested in,” Wellman says, “is how should an advertiser decide which 
keywords to bid on, how much to bid and how to learn over time—based on how 
effective their ads are—how much competition there is for each keyword.” 


Source: Adapted from Gary Anthes, “Future Watch: A.I. Comes of Age,” Computerworld, January 26, 2009. 


One of the most practical and widely implemented applications of artificial intelli- 
gence in business is the development of expert systems and other knowledge-based 
information systems. A knowledge-based information system (KBIS) adds a knowl- 
edge base to the major components found in other types of computer-based informa- 
tion systems. An expert system (ES) is a knowledge-based information system that 
uses its knowledge about a specific, complex application area to act as an expert con- 
sultant to end users. Expert systems provide answers to questions in a very specific 
problem area by making humanlike inferences about knowledge contained in a spe- 
cialized knowledge base. They must also be able to explain their reasoning process and 
conclusions to a user, so expert systems can provide decision support to end users in 
the form of advice from an expert consultant in a specific problem area. 


The components of an expert system include a knowledge base and software modules 
that perform inferences on the knowledge in the knowledge base and communicate 
answers to a user’s questions. Figure 9.28 illustrates the interrelated components of an 
expert system. Note the following components: 


Methods of Knowledge Representation 


© Case-Based Reasoning. Representing knowledge in an expert system’s knowledge base 
in the form of cases, that is, examples of past performance, occurrences, and experiences. 


e Frame-Based Knowledge. Knowledge represented in the form of a hierarchy or net- 
work of frames. A frame is a collection of knowledge about an entity consisting of a 
complex package of data values describing its attributes. 


© Object-Based Knowledge. Knowledge represented as a network of objects. An object is 
a data element that includes both data and the methods or processes that act on those data. 


e Rule-Based Knowledge. Knowledge represented in the form of rules and statements 
of fact. Rules are statements that typically take the form of a premise and a conclusion, 
such as If (condition), Then (conclusion). 


FIGURE 9.29 
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Components of an expert system. The software modules perform inferences on a knowledge base built 


by an expert and/or knowledge engineer. This provides expert answers to an end user’s questions in an interactive process. 
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e Knowledge Base. The knowledge base of an expert system contains (1) facts 
about a specific subject area (e.g., John is an analyst) and (2) heuristics (rules of 
thumb) that express the reasoning procedures of an expert on the subject (e.g., 
IF Jobn is an analyst, THEN he needs a workstation). There are many ways that 
such knowledge is represented in expert systems. Examples are rule-based, 
frame-based, object-based, and case-based methods of knowledge representation. 
See Figure 9.29. 


e Software Resources. An expert system software package contains an inference 
engine and other programs for refining knowledge and communicating with 
users. The inference engine program processes the knowledge (such as rules 
and facts) related to a specific problem. It then makes associations and inferences 
resulting in recommended courses of action for a user. User interface programs 
for communicating with end users are also needed, including an explanation 
program to explain the reasoning process to a user if requested. Knowledge 
acquisition programs are not part of an expert system but are software tools 
for knowledge base development, as are expert system shells, which are used for 
developing expert systems. 


Using an expert system involves an interactive computer-based session in which the 
solution to a problem is explored, with the expert system acting as a consultant to an 
end user. The expert system asks questions of the user, searches its knowledge base for 
facts and rules or other knowledge, explains its reasoning process when asked, and gives 
expert advice to the user in the subject area being explored. For example, Figure 9.30 
illustrates an expert system application. 
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Expert systems are being used for many different types of applications, and the vari- 
ety of applications is expected to continue to increase. You should realize, however, that 
expert systems typically accomplish one or more generic uses. Figure 9.31 outlines five 
generic categories of expert system activities, with specific examples of actual expert 
system applications. As you can see, expert systems are being used in many different 
fields, including medicine, engineering, the physical sciences, and business. Expert sys- 
tems now help diagnose illnesses, search for minerals, analyze compounds, recommend 
repairs, and do financial planning. So from a strategic business standpoint, expert sys- 
tems can be and are being used to improve every step of the product cycle of a business, 
from finding customers to shipping products to providing customer service. 


An expert system captures the expertise of an expert or group of experts in a computer- 
based information system. Thus, it can outperform a single human expert in many 
problem situations. That’s because an expert system is faster and more consistent, can 
have the knowledge of several experts, and does not get tired or distracted by over- 
work or stress. Expert systems also help preserve and reproduce the knowledge of ex- 
perts. They allow a company to preserve the expertise of an expert before she leaves 
the organization. This expertise can then be shared by reproducing the software and 
knowledge base of the expert system. 


The major limitations of expert systems arise from their limited focus, inability to 
learn, maintenance problems, and developmental cost. Expert systems excel only in 
solving specific types of problems in a limited domain of knowledge. They fail miser- 
ably in solving problems requiring a broad knowledge base and subjective problem 
solving. They do well with specific types of operational or analytical tasks but falter at 
subjective managerial decision making. 

Expert systems may also be difficult and costly to develop and maintain. The costs 
of knowledge engineers, lost expert time, and hardware and software resources may be 
too high to offset the benefits expected from some applications. Also, expert systems 
can’t maintain themselves; that is, they can’t learn from experience but instead must be 
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Application Categories of Expert Systems 


e Decision Management. Systems that appraise situations or consider alternatives and 
make recommendations based on criteria supplied during the discovery process: 
Loan portfolio analysis 
Employee performance evaluation 
Insurance underwriting 
Demographic forecasts 


e Diagnostic/Troubleshooting. Systems that infer underlying causes from reported 
symptoms and history: 
Equipment calibration 
Help desk operations 
Software debugging 
Medical diagnosis 


e Design/Configuration. Systems that help configure equipment components, given 
existing constraints: 
Computer option installation 
Manufacturability studies 
Communications networks 
Optimum assembly plan 


e Selection/Classification. Systems that help users choose products or processes, often 
from among large or complex sets of alternatives: 
Material selection 
Delinquent account identification 
Information classification 
Suspect identification 


e Process Monitoring/Control. Systems that monitor and control procedures or 
processes: 
Machine control (including robotics) 
Inventory control 
Production monitoring 
Chemical testing 


taught new knowledge and modified as new expertise is needed to match develop- 
ments in their subject areas. 

Although there are practical applications for expert systems, applications have been 
limited and specific because, as discussed, expert systems are narrow in their domain 
of knowledge. An amusing example of this is the user who used an expert system de- 
signed to diagnose skin diseases to conclude that his rusty old car had likely developed 
measles. In addition, once some of the novelty had worn off, most programmers and 
developers realized that common expert systems were just more elaborate versions of 
the same decision logic used in most computer programs. Today, many of the tech- 
niques used to develop expert systems can now be found in most complex programs 
without any fuss about them. 


Healthways, the US leader in health and care support for well and chronically ill 
populations, relies on SAS to identify high-risk patients and implement preventative 
actions. The company knows that a key to successful disease management is the cor- 
rect identification of those members in greatest need of care. Using SAS, Healthways 
reduces costs and helps to improve member health outcomes by predicting who is at 
most risk for developing specific health problems. In doing so, it is able to coordinate 
intervention plans that address care designed to avoid complications down the road. 
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Healthways provides disease and care management to more than two million 
health-plan members in all 50 states, the District of Columbia, Guam, and Puerto 
Rico. The company provides its services on behalf of the nation’s leading health 
plans. It employs thousands of nurses at call centers throughout the country who col- 
lect data and provide clinical support to health-plan members and their physicians. 

At Healthways, the goal is to empower health-plan members to manage their 
health effectively. The company achieves its objective using SAS for data mining and 
a group of robust artificial intelligence neural networks. To support predictive ana- 
lytics, Healthways accesses hundreds of data points involving care for millions of 
health-plan members. 

“We want to develop predictive models that not only identify and classify patients 
who are at risk, but also anticipate who is at the highest risk for specific diseases and 
complications and then determine which of those are most likely to comply with 
recommended standards of care,” says Adam Hobgood, Director of Statistics at 
Healthways’ Center for Health Research. “Most of all we want to predict their likeli- 
hood of success with our support programs. By identifying high-risk patients and 
implementing preventative actions against future conditions, we hope to head off the 
increased costs of care before they occur.” 

With SAS, Healthways builds predictive models that assess patient risk for cer- 
tain outcomes and establishes starting points for providing services. Once Health- 
ways loads patient risk-stratification levels into its own “clinical expert system,” the 
system evaluates clinical information from hospitals, data that nurses collect by 
phone and information that employer groups and health-plan members report. 

Finally, the clinical expert system adjusts the initial risk-stratification levels based 
on the new inputs and expert clinical judgment. The resulting approach to member 
stratification is a hybrid solution that incorporates sophisticated artificial intelligence 
neural network predictive models, clinically relevant rule-based models and expert 
clinician judgment. 

“Its a very powerful hybrid solution, and we have worked closely with clinical 
experts in the company to integrate the neural network predictive model with our 
world-class clinical expert system,” says Matthew McGinnis, Senior Director of 
Healthways’ Center for Health Research. “The ability of our highly experienced 
clinicians to use their expert clinical judgment further complements the model and 
rounds out our hybrid approach to stratification. We believe that sophisticated statis- 
tical models are necessary to help risk-stratify our significant member populations, 
and by coupling this with the expertly trained clinical mind, we have created a hybrid 
solution that is unrivaled in the industry.” 


Source: Adapted from “Healthways Heads Off Increased Costs with SAS®,” www.sas.com, accessed April 25, 2009. 


What types of problems are most suitable to expert system solutions? One way to an- 
swer this question is to look at examples of the applications of current expert systems, 
including the generic tasks they can accomplish, as were summarized in Figure 9.31. 
Another way is to identify criteria that make a problem situation suitable for an expert 
system. Figure 9.32 outlines some important criteria. 

Figure 9.32 emphasizes that many real-world situations do not fit the suitability 
criteria for expert system solutions. Hundreds of rules may be required to capture the 
assumptions, facts, and reasoning that are involved in even simple problem situations. 
For example, a task that might take an expert a few minutes to accomplish might re- 
quire an expert system with hundreds of rules and take several months to develop. 

The easiest way to develop an expert system is to use an expert system shell as a 
developmental tool. An expert system shell is a software package consisting of an 
expert system without its kernel, that is, its knowledge base. This leaves a shell of 
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Suitability Criteria for Expert Systems 
© Domain. The domain, or subject area, of the problem is relatively small and limited to 
a well-defined problem area. 


e Expertise. Solutions to the problem require the efforts of an expert. That is, a body of 
knowledge, techniques, and intuition is needed that only a few people possess. 


e Complexity. Solution of the problem is a complex task that requires logical inference 
processing, which would not be handled as well by conventional information processing. 


e Structure. The solution process must be able to cope with ill-structured, uncertain, miss- 
ing, and conflicting data, and a problem situation that changes with the passage of time. 


e Availability. An expert exists who is articulate and cooperative, and who has the support 
of the management and end users involved in the development of the proposed system. 


software (the inference engine and user interface programs) with generic inferencing 
and user interface capabilities. Other development tools (e.g., rule editors, user interface 
generators) are added in making the shell a powerful expert system development tool. 

Expert system shells are now available as relatively low-cost software packages that 
help users develop their own expert systems on microcomputers. They allow trained 
users to develop the knowledge base for a specific expert system application. For ex- 
ample, one shell uses a spreadsheet format to help end users develop IF-THEN rules, 
automatically generating rules based on examples furnished by a user. Once a knowl- 
edge base is constructed, it is used with the shell’s inference engine and user interface 
modules as a complete expert system on a specific subject area. Other software tools 
may require an IT specialist to develop expert systems. See Figure 9.33. 


A knowledge engineer is a professional who works with experts to capture the knowledge 
(facts and rules of thumb) they possess. The knowledge engineer then builds the knowl- 
edge base (and the rest of the expert system if necessary), using an iterative, prototyping 
process until the expert system is acceptable. Thus, knowledge engineers perform a role 
similar to that of systems analysts in conventional information systems development. 
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Once the decision is made to develop an expert system, a team of one or more 
domain experts and a knowledge engineer may be formed. Experts skilled in the use of 
expert system shells could also develop their own expert systems. If a shell is used, 
facts and rules of thumb about a specific domain can be defined and entered into a 
knowledge base with the help of a rule editor or other knowledge acquisition tool. A 
limited working prototype of the knowledge base is then constructed, tested, and eval- 
uated using the inference engine and user interface programs of the shell. The knowl- 
edge engineer and domain experts can modify the knowledge base, and then retest the 
system and evaluate the results. This process is repeated until the knowledge base and 
the shell result in an acceptable expert system. 


Neural networks are computing systems modeled after the brain’s meshlike network of 
interconnected processing elements, called neurons. Of course, neural networks are a 
lot simpler in architecture (the human brain is estimated to have more than 100 billion 
neuron brain cells!). Like the brain, however, the interconnected processors in a neu- 
ral network operate in parallel and interact dynamically. This interaction enables the 
network to “learn” from data it processes. That is, it learns to recognize patterns and 
relationships in these data. The more data examples it receives as input, the better it 
can learn to duplicate the results of the examples it processes. Thus, the neural net- 
work will change the strengths of the interconnections between the processing 
elements in response to changing patterns in the data it receives and the results that 
occur. See Figure 9.34. 


Neurosurgery, surgery performed on the brain and spinal cord, has advanced to 
extraordinary levels of skill and success in just the last decade. One of the most 
common applications of neurosurgical techniques is the removal of brain tumors. 
Currently, surgeons search for tumors manually using a metal biopsy needle inserted 
into the brain. Guided by ultrasound and modern imaging techniques such as MRI/ 
CT scans, they primarily use tactile feedback to localize the tumor. This method, 
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however, can be imprecise, as the tumors can easily shift during surgery, causing 
healthy tissue to be mistakenly treated as tumorous tissue. This inaccuracy can 
increase the risk of a stroke should a needle accidentally sever an artery. 

A new technique, which is a combination of hardware and software, has been 
developed that gives neurosurgeons the ability to find their way through the brain 
while doing less damage as they operate. The primary piece of the hardware is a ro- 
botic probe that has on its tip several miniature sensors: an endoscope that transmits 
images and instruments that measure tissue density and blood flow. This probe is 
inserted into the brain and guided through it by a robotic mechanism that is more 
precise and accurate than human hands. 

The real power in this miracle technique, however, is the sophisticated, adaptable 
neural network software that provides an instant in-depth analysis of the data gath- 
ered by the probe. Surgeons are able to look at a computer screen in the operating 
room and see a vast array of useful real-time information about what is going on in 
the patient’s brain, such as whether the probe is encountering healthy tissue, blood 
vessels, or a tumor. The neural net software is adaptable in that it learns from experi- 
ence the difference between normal tissue and tumorous tissue. Laboratory biopsy 
test results are used to validate the data used for training the neural net software. 
Once trained, the neural net can be used to identify in real time abnormal tissues 
encountered during surgical operations. Once learned, the probe is robotically ad- 
vanced and stops immediately when it detects a signature significantly different from 
what was learned to be normal tissue. At this point, tissue identification is performed 
automatically, and the results presented to the surgeon. The surgeon can then treat 
the abnormal tissue appropriately and without delay. 

This new technique gives surgeons finer control of surgical instruments during 
delicate brain operations. Overall, the new technique will increase the safety, accu- 
racy, and efficiency of surgical procedures. 


Source: Adapted from Bioluminate Inc., Press Release, “Bioluminate to Develop ‘Smart Probe’ for Early Breast 
Cancer Detection,” December 5, 2002; and “NASA Ames Research Center Report,” Smart Surgical Probe, 
Bioluminate Inc., 2003. 


For example, a neural network can be trained to learn which credit characteristics 
result in good or bad loans. Developers of a credit evaluation neural network could 
provide it with data from many examples of credit applications and loan results to 
process, with opportunities to adjust the signal strengths between its neurons. The 
neural network would continue to be trained until it demonstrated a high degree of 
accuracy in correctly duplicating the results of recent cases. At that point it would be 
trained enough to begin making credit evaluations of its own. 


In spite of their funny name, fuzzy logic systems represent a small, but serious, appli- 
cation of AI in business. Fuzzy logic is a method of reasoning that resembles human 
reasoning, in that it allows for approximate values and inferences (fuzzy logic) and in- 
complete or ambiguous data (fuzzy data) instead of relying only on crisp data, such as 
binary (yes/no) choices. For example, Figure 9.35 illustrates a partial set of rules (fuzzy 
rules) and a fuzzy SQL query for analyzing and extracting credit risk information on 
businesses that are being evaluated for selection as investments. 

Notice how fuzzy logic uses terminology that is deliberately imprecise, such as very 
high, increasing, somewhat decreased, reasonable, and very low. This language enables 
fuzzy systems to process incomplete data and quickly provide approximate, but ac- 
ceptable, solutions to problems that are difficult for other methods to solve. Thus, 
fuzzy logic queries of a database, such as the SQL query shown in Figure 9.35, prom- 
ise to improve the extraction of data from business databases. It is important to note 
that fuzzy logic isn’t fuzzy or imprecise thinking. Fuzzy logic actually brings precision 
to decision scenarios where it previously didn’t exist. 
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FIGURE 9.35 An example of fuzzy logic rules and a fuzzy logic SQL query in a credit risk analysis application. 
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Examples of applications of fuzzy logic are numerous in Japan but rare in the United 
States. The United States has preferred to use AI solutions like expert systems or neu- 
ral networks, but Japan has implemented many fuzzy logic applications, especially the 
use of special-purpose fuzzy logic microprocessor chips, called fuzzy process control- 
lers. Thus, the Japanese ride on subway trains, use elevators, and drive cars that are 
guided or supported by fuzzy process controllers made by Hitachi and Toshiba. Many 
models of Japanese-made products also feature fuzzy logic microprocessors. The list is 
growing and includes autofocus cameras, autostabilizing camcorders, energy-efficient 
air conditioners, self-adjusting washing machines, and automatic transmissions. 


The use of genetic algorithms is a growing application of artificial intelligence. Ge- 
netic algorithm software uses Darwinian (survival of the fittest), randomizing, and 
other mathematical functions to simulate an evolutionary process that can yield in- 
creasingly better solutions to a problem. Genetic algorithms were first used to simu- 
late millions of years in biological, geological, and ecosystem evolution in just a few 
minutes on a computer. Genetic algorithm software is being used to model a variety of 
scientific, technical, and business processes. 

Genetic algorithms are especially useful for situations in which thousands of solutions 
are possible and must be evaluated to produce an optimal solution. Genetic algorithm 
software uses sets of mathematical process rules (algorithms) that specify how combinations 
of process components or steps are to be formed. This process may involve trying random 
process combinations (mutation), combining parts of several good processes (crossover), and 
selecting good sets of processes and discarding poor ones (se/ection) to generate increas- 
ingly better solutions. Figure 9.36 illustrates a business use of genetic algorithm software. 


United Distillers (now part of Diageo PLC) is the largest and most profitable spirits 
company in the world. United Distillers’ two grain distilleries account for more than 
one-third of total grain whiskey production, and the company’s Johnnie Walker 
brand is the world’s top whiskey, achieving sales of up to 120 million bottles a year. 
Nevertheless, Christine Wright, Inventory and Supply Manager at United Dis- 
tillers, points out that some parts of the business attract less attention than others: 
“Fach week, 20,000 casks are moved in and out of our 49 warehouses throughout 
Scotland to provide the whiskey needed for the blending program. Warehousing is a 
physical and laborious process and has tended to be the forgotten side of the busi- 
ness.” The introduction of genetic algorithm computer technology, however, during 
the past year has given a fillip to the blend selection process at United Distillers. 
“We want to maximize our operational efficiency without compromising the qual- 
ity,” states Christine Wright. United Distillers’ Blackgrange warehouse site alone 
houses approximately 3 million casks, indicating the scale of the challenge. Of the 


FIGURE 9.36 

Risk Optimizer software 
combines genetic 
algorithms with a risk 
simulation function in this 
airline yield optimization 
application. 
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20,000 casks that are moved each week, 10,000 are not used but are moved only to 
allow access to those identified by the selection process. “Although we had 100 per- 
cent accurate positional information about all the stock, casks had to be selected nu- 
merically. Given the practical challenges involved in warehouse management, casks 
are seldom stored numerically.” 

Information held on the system about recipes, site constraints, and the blending 
program is given to the XpertRule package, which works out the best combinations 
of stocks to produce the blends. This information is supplemented with positional 
information about the casks. The system then optimizes the selection of required 
casks, keeping to a minimum the number of “doors” (warehouse sections) from 
which the casks must be taken and the number of casks that need to be moved to 
clear the way. Other constraints must be satisfied, such as the current working capac- 
ity of each warehouse and the maintenance and restocking work that may be in 
progress. Lancashire-based expert systems specialist XpertRule Software Limited 
has worked closely with United Distillers to develop the software application using 
XpertRule. The system is based on the use of genetic algorithms and adopts the 
Darwinian principle of natural selection to optimize the selection process. 

“The incidence of non-productive cask movements has plummeted from a high of 
around 50 percent to a negligible level of around 4 percent and our cask handling rates 
have almost doubled.” She adds: “The new technology enables staff to concentrate on 
what they want to achieve, rather than the mechanism of how to go about it. They can 
concentrate on the constraints that they wish to impose and get the system to do the 
leg work of finding the best scenario within those constraints. It means that the busi- 
ness can be driven by primary objectives.” “Not only does the lack of wasted effort al- 
low warehouse staff to get on with their work, but it enables them to plan ahead and 
organize long-term maintenance programs. It encourages a mind-set that is strategic, 
rather than reactive, and empowers managers to manage their own sites.” 


Source: Adapted from XpertRule Case Study, “A Break from Tradition in Blend Selection at United Distillers & 
Vintners,” http://www.xpertrule.com/pages/case_ud.htm, accessed April 23, 2008. 
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Virtual Reality 


VR Applications 


FIGURE 9.37 


This landscape architect 
uses a virtual reality system 
to view and move through 
the design of the Seattle 
Commons, an urban design 
proposal for downtown 
Seattle. 


Virtual reality (VR) is computer-simulated reality. Virtual reality is a fast-growing area 
of artificial intelligence that had its origins in efforts to build more natural, realistic, 
multisensory human-computer interfaces. So virtual reality relies on multisensory in- 
put/output devices such as a tracking headset with video goggles and stereo earphones, 
a data glove or jumpsuit with fiber-optic sensors that track your body movements, and a 
walker that monitors the movement of your feet. Then you can experience computer- 
simulated “virtual worlds” three-dimensionally through sight, sound, and touch. Vir- 
tual reality is also called telepresence. For example, you can enter a computer-generated 
virtual world, look around and observe its contents, pick up and move objects, and 
move around in it at will. Thus, virtual reality allows you to interact with computer- 
simulated objects, entities, and environments as if they actually exist. See Figure 9.37. 


Current applications of virtual reality are wide-ranging and include computer-aided 
design (CAD), medical diagnostics and treatment, scientific experimentation in many 
physical and biological sciences, flight simulation for training pilots and astronauts, 
product demonstrations, employee training, and entertainment, especially 3D video 
arcade games. CAD is the most widely used industrial VR application. It enables ar- 
chitects and other designers to design and test electronic 3D models of products and 
structures by entering the models themselves and examining, touching, and manipu- 
lating sections and parts from all angles. This scientific-visualization capability is also 
used by pharmaceutical and biotechnology firms to develop and observe the behavior 
of computerized models of new drugs and materials and by medical researchers to 
develop ways for physicians to enter and examine a virtual reality of a patient’s body. 

VR becomes telepresence when users, who can be anywhere in the world, use VR 
systems to work alone or together at a remote site. Typically, this involves using a VR 
system to enhance the sight and touch of a human who is remotely manipulating 
equipment to accomplish a task. Examples range from virtual surgery, where surgeon 
and patient may be on either side of the globe, to the remote use of equipment in haz- 
ardous environments such as chemical plants or nuclear reactors. 

The hottest VR application today is Linden Lab’s Second Life. Here, users can cre- 
ate avatars to represent them, teleport to any of the thousands of locations in Second 
Life, build personal domains, “buy” land, and live out their wildest fantasies. Second 
Life has grown to enormous proportions although actual statistics regarding size and 


Source: © George Steinmetz/Corbis. 
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number of users are constantly in dispute. Today, Second Life is home to individuals, com- 
mercial organizations, universities, governments (the Maldives was the first country to 
open an embassy in Second Life), churches, sports entertainment, art exhibits, live music, 
and theater. Just about anything goes in Second Life and, as technologies advance, the lines 
between your first life and your second one may begin to blur—stay tuned. 


Norsk Hydro, based in Oslo, Norway, is a Fortune 500 energy and aluminum sup- 
plier operating in more than 40 countries worldwide. It is a leading offshore pro- 
ducer of oil and gas, the world’s third-largest aluminum supplier, and a leader in the 
development of renewable energy sources. Norsk Hydro is also an innovator in the 
use of virtual reality technology. It uses VR to make decisions that, if wrong, could 
cost the company millions in lost revenues and, more important, could harm the 
environment. One example of its successful use of VR is the Troll Oil Field project. 

The Troll Oil Field is located in the North Sea. The eastern part of the field has 
an oil column only 39-46 feet wide, but with in-place reserves of approximately 
2.2 billion barrels. The oil is produced by horizontal wells located 1.5-5 feet above 
the point where the oil and seawater make contact. 

During one drilling of a horizontal well, the drill bit was in sand of relatively low 
quality. No further good-quality reservoir sands were predicted from the geological 
model along the planned well track. Approximately 820 feet remained to the planned 
total depth, so a major decision to terminate the well required confirmation. If the 
decision to terminate the well was the right decision, the cost of drilling to that date 
would be lost, but no further loss or damage to the environment would occur. If, 
however, the decision to terminate the well was the wrong decision, valuable oil 
reserves would be lost forever. 

Virtual reality technology was fundamental in deciding whether to terminate the 
well. All relevant data were loaded into the system for review. During a virtual reality 
session, the well team discovered a mismatch between the seismic data and the geo- 
logical model. Based on this observation, they made a quick reinterpretation of some 
key seismic horizons and updated the geological model locally around the well. 

‘The updated model changed the prognosis for the remaining section of the well 
from poor-quality sand to high-quality sand. It was decided to continue drilling, and 
the new prognosis was proven correct. As a result, 175 meters of extra-high-quality 
sand with an estimated production volume of 100,000 standard cubic meters of oil 
were drilled in the last section of the well. 


Source: Adapted from Norsk Hydro Corporate Background, www.hydro.com, 2004; and Schlumberger Information 
Solutions, “Norsk Hydro Makes a Valuable Drilling Decision,” Schlumberger Technical Report GMP-5911, 2002. 


Intelligent agents are growing in popularity as a way to use artificial intelligence routines 
in software to help users accomplish many kinds of tasks in e-business and e-commerce. 
An intelligent agent is a software surrogate for an end user or a process that fulfills a stated 
need or activity. An intelligent agent uses its built-in and learned knowledge base about 
a person or process to make decisions and accomplish tasks in a way that fulfills the 
intentions of a user. Sometimes an intelligent agent is given a graphic representation or 
persona, such as Einstein for a science advisor, Sherlock Holmes for an information 
search agent, and so on. Thus, intelligent agents (also called software robots or “bots”) are 
special-purpose, knowledge-based information systems that accomplish specific tasks for 
users. Figure 9.38 summarizes major types of intelligent agents. 

The wizards found in Microsoft Office and other software suites are among the 
most well-known examples of intelligent agents. These wizards are built-in capabili- 
ties that can analyze how an end user is using a software package and offer suggestions 
on how to complete various tasks. Thus, wizards might help you change document 


396 © Module III / Business Applications 


FIGURE 9.38 


Examples of different types 
of intelligent agents. 


FIGURE 9.39 


Intelligent agent software 
such as Copernic can help 
you access information from 
a variety of categories and 
from a variety of sources. 


Types of Intelligent Agents 


User Interface Agents 
e Interface Tutors. Observe user computer operations, correct user mistakes, and provide 
hints and advice on efficient software use. 


e Presentation Agents. Show information in a variety of reporting and presentation 
forms and media based on user preferences. 


e Network Navigation Agents. Discover paths to information and provide ways to 
view information that are preferred by a user. 


e Role-Playing Agents. Play what-if games and other roles to help users understand 
information and make better decisions. 


Information Management Agents 


e Search Agents. Help users find files and databases, search for desired information, 
and suggest and find new types of information products, media, and resources. 

e Information Brokers. Provide commercial services to discover and develop 
information resources that fit the business or personal needs of a user. 

e Information Filters. Receive, find, filter, discard, save, forward, and notify users 


about products received or desired, including e-mail, voice mail, and all other 
information media. 


margins, format spreadsheet cells, query a database, or construct a graph. Wizards and 
other software agents are also designed to adjust to your way of using a software pack- 
age so that they can anticipate when you will need their assistance. See Figure 9.39. 

The use of intelligent agents is growing rapidly as a way to simplify software use, 
search Web sites on the Internet and corporate intranets, and help customers do com- 
parison shopping among the many e-commerce sites on the Web. Intelligent agents 
are becoming necessary as software packages become more sophisticated and power- 
ful, as the Internet and the World Wide Web become more vast and complex, and as 
information sources and e-commerce alternatives proliferate exponentially. In fact, 
some commentators forecast that much of the future of computing will consist of 
intelligent agents performing their work for users. 
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Source: Courtesy of Copernic. 


Security Uses of 
Intelligent 
Software Agents 
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In 2002, the Army began to use intelligent software agents instead of people to route 
the background files of soldiers who required security clearance to the proper au- 
thorities for review. The result: A process that once took days now takes 24 hours. 
The Army reduced its year-long backlog, and the Army Central Clearance Facility in 
Fort Meade, Maryland, can now handle 30 percent more requests a year. ‘The intel- 
ligent agent retrieves the necessary background information from existing records 
and builds an electronic folder for each case. It then examines the file to determine 
whether it’s a clean case or there are warning signs, such as financial problems, ar- 
rests, or anything to indicate that a person might be susceptible to improper influ- 
ence. Human investigators take closer looks at the tough cases. 

Intelligent agents are semiautonomous, proactive, and adaptive software systems 
that can act on a user’s behalf. Give an intelligent agent a goal, such as to help a U.S. 
ambassador pick a safe evacuation route following a terrorist attack in a foreign 
country, and it creates the best plan after gathering weather information, news 
reports, airplane schedules, road information, and police reports. 

Such agents can also help investigators identify unusual patterns of activity, says 
Henry Lieberman, research scientist and leader of the Software Agents Group at 
the MIT Media Lab in Cambridge, Massachusetts. “Law enforcement can say to 
an intelligent agent, ‘Let me know when any person arrived from a sensitive Mid- 
dle Eastern country that was recently involved in a large bank transfer.’ Or govern- 
ment agencies like the Securities and Exchange Commission can use them to 
monitor financial statements for fraud. Maybe they could have caught the whole 
Enron thing earlier.” 

Nevertheless, the issue of trust may deter their widespread adoption in business. 
“People just aren’t used to using these kinds of things yet,” says Lieberman. “When 
you first start using one of these agents, you have to watch it closely to make sure it’s 
doing what you want. But performance improves over time. And the agent just makes 
a proposal. Then it’s up to you.” 


Source: Adapted from Stephanie Overby, “Security Strategy Includes Intelligent Software Agents,” CIO Magazine, 
January 1, 2003. 


Information, Decisions, and Management. Informa- 
tion systems can support a variety of management deci- 
sion-making levels and decisions. These include the 
three levels of management activity (strategic, tactical, 
and operational decision making) and three types of 
decision structures (structured, semistructured, and 
unstructured). Information systems provide a wide 
range of information products to support these types 
of decisions at all levels of the organization. 


Decision Support Trends. Major changes are taking 
place in traditional MIS, DSS, and EIS tools for provid- 
ing the information, and modeling managers need to 
support their decision making. Decision support in 
business is changing, driven by rapid developments in 
end-user computing and networking; Internet and Web 
technologies; and Web-enabled business applications. 
The growth of corporate intranets and extranets, as well 


as the Web, has accelerated the development of “execu- 
tive-class” interfaces like enterprise information portals 
and Web-enabled business intelligence software tools, 
as well as their use by lower levels of management and 
individuals and teams of business professionals. In addi- 
tion, the growth of e-commerce and e-business applica- 
tions has expanded the use of enterprise portals and 
DSS tools by the suppliers, customers, and other 
business stakeholders of a company. 


Management Information Systems. Management in- 
formation systems provide prespecified reports and re- 
sponses to managers on a periodic, exception, demand, 
or push reporting basis to meet their need for informa- 
tion to support decision making. 


OLAP and Data Mining. Online analytical processing 
interactively analyzes complex relationships among 
large amounts of data stored in multidimensional 
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databases. Data mining analyzes the vast amounts of 
historical data that have been prepared for analysis in 
data warehouses. Both technologies discover patterns, 
trends, and exception conditions in a company’s data 
that support business analysis and decision making. 


Decision Support Systems. Decision support systems 
are interactive, computer-based information systems 
that use DSS software and a model base and database to 
provide information tailored to support semistructured 
and unstructured decisions faced by individual manag- 
ers. They are designed to use a decision maker’s own 
insights and judgments in an ad hoc, interactive, analyt- 
ical modeling process leading to a specific decision. 


Executive Information Systems. Executive informa- 
tion systems are information systems originally de- 
signed to support the strategic information needs of top 
management; however, their use is spreading to lower 
levels of management and business professionals. EIS 
are easy to use and enable executives to retrieve infor- 
mation tailored to their needs and preferences. Thus, 
EIS can provide information about a company’s critical 
success factors to executives to support their planning 
and control responsibilities. 


Enterprise Information and Knowledge Portals. 
Enterprise information portals provide a customized and 
personalized Web-based interface for corporate intra- 
nets to give their users easy access to a variety of internal 
and external business applications, databases, and infor- 
mation services that are tailored to their individual pref- 
erences and information needs. Thus, an EIP can supply 
personalized Web-enabled information, knowledge, and 
decision support to executives, managers, and business 
professionals, as well as to customers, suppliers, and 
other business partners. An enterprise knowledge portal 
is a corporate intranet portal that extends the use of an 
EIP to include knowledge management functions and 
knowledge base resources so that it becomes a major 
form of knowledge management system for a company. 


Artificial Intelligence. The major application domains 
of artificial intelligence (AI) include a variety of applica- 
tions in cognitive science, robotics, and natural inter- 
faces. The goal of AI is the development of computer 
functions normally associated with human physical and 
mental capabilities, such as robots that see, hear, talk, 
feel, and move, and software capable of reasoning, learn- 
ing, and problem solving. Thus, AI is being applied to 
many applications in business operations and managerial 
decision making, as well as in many other fields. 


AI Technologies. The many application areas of AI are 
summarized in Figure 9.26, including neural networks, 
fuzzy logic, genetic algorithms, virtual reality, and intelli- 
gent agents. Neural nets are hardware or software systems 
based on simple models of the brain’s neuron structure 
that can learn to recognize patterns in data. Fuzzy logic 
systems use rules of approximate reasoning to solve prob- 
lems when data are incomplete or ambiguous. Genetic 
algorithms use selection, randomizing, and other mathe- 
matic functions to simulate an evolutionary process that 
can yield increasingly better solutions to problems. Vir- 
tual reality systems are multisensory systems that enable 
human users to experience computer-simulated environ- 
ments as if they actually existed. Intelligent agents are 
knowledge-based software surrogates for a user or process 
in the accomplishment of selected tasks. 


Expert Systems. Expert systems are knowledge-based 
information systems that use software and a knowledge 
base about a specific, complex application area to act as 
expert consultants to users in many business and technical 
applications. Software includes an inference engine pro- 
gram that makes inferences based on the facts and rules 
stored in the knowledge base. A knowledge base consists 
of facts about a specific subject area and heuristics (rules 
of thumb) that express the reasoning procedures of an ex- 
pert. The benefits of expert systems (such as preservation 
and replication of expertise) must be balanced with their 
limited applicability in many problem situations. 


Key Terms and Concepts 


These are the key terms and concepts of this chapter. The page number of their first explanation is in parentheses. 


1. 


nA Bw N 


6. Decision structure (354) 


7. Decision support system (357) 


. Artificial intelligence (378) 
. Business intelligence (355) 
. Data mining (369) 


. Data visualization 


Analytical modeling (367) 


8. Enterprise information portal (374) 18. Knowledge base (385) 


a. Goal-seeking analysis (368) 9. Enterprise knowledge portal (376) 19. Knowledge engineer (389) 


b. Optimization analysis (369) 10 
c. Sensitivity analysis (368) 
d. What-if analysis (367) 


6 
system (364) eee) 


11. Expert system (384) 
12. Expert system shell (388) 
13. Fuzzy logic 391) 

14. Genetic algorithms (392) 


15. Geographic information 


16. Inference engine (385) 
17. Intelligent agent (395) 


. Executive information system (372) 20. Knowledge management 


system (376) 


21. Management information 
system (359) 


22. Model base (357) 

23. Neural network (390) 

24. Online analytical processing (361) 
25. Robotics (383) 

26. Virtual reality (394) 
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Review Quiz 


Match one of the key terms and concepts listed previously with one of the brief examples or definitions that follow. Try to find 
the best fit for answers that seem to fit more than one term or concept. Defend your choices. 


—— l. Decision-making procedures cannot be specified —— 17. An enterprise information portal that can access 
in advance for some complex decision situations. knowledge management functions and company 


—— 2. Information systems for the strategic information knowledge bases. 


needs of top and middle managers. —— 18. Information technology that focuses on the devel- 
opment of computer functions normally associated 


—— 3. Systems that prod defined ts fi 
ey S E with human physical and mental capabilities. 


management. 

—— 19. Development of computer-based machines that 
possess capabilities such as sight, hearing, dexter- 
ity, and movement. 


—— 4. Provide an interactive modeling capability tailored 
to the specific information needs of managers. 


—— 5. Provides business information and analytical tools 
for managers, business professionals, and business 
stakeholders. 


—— 20. Computers that can provide you with computer- 
simulated experiences. 


___ 21. An information system that integrates computer 
graphics, geographic databases, and DSS 
capabilities. 


—— 6.Acollection of mathematical models and analytical 
techniques. 


—— 7. Analyzing the effect of changing variables and rela- 


tionships and manipulating a mathematical model. ___ 22. A knowledge-based information system that acts as 


; an expert consultant to users in a specific applica- 
—— 8. Changing revenues and tax rates to see the effect tonarea 


on net profit after taxes. . , . 
—— 23. A collection of facts and reasoning procedures in a 


—— 9. Changing revenues in many small increments to specific subject area. 


see revenue’s effect on net profit after taxes. : 
p —— 24. A software package that manipulates a knowledge 


— 10. Changing revenues and expenses to find how you base and makes associations and inferences leading 
could achieve a specific amount of net profit after toa recomended course oF action. 


taxes. 23 : 
—— 25. A software package consisting of an inference en- 


gine and user interface programs used as an expert 
system development tool. 


—— 11. Changing revenues and expenses subject to certain 
constraints to achieve the highest profit after taxes. 


—— 12. Real-time analysis of complex business data. ____ 26. An analyst who interviews experts to develop a 
—— 13. Attempts to find patterns hidden in business data knowledge base about a specific application area. 
in a data warehouse. —— 27. Al systems that use neuron structures to recognize 
—— 14. Represents complex data using three-dimensional patterns in data. 
graphical forms. 28. AI systems that use approximate reasoning to pro- 
——— 15. A customized and personalized Web interface to cess ambiguous data. 
internal and external information resources avail- 29. Knowledge-based software surrogates that do 
able through a corporate intranet. things for you. 
—— 16. Using intranets to gather, store, and share a com- ____ 30. Software that uses mathematical functions to sim- 
pany’s best practices among employees. ulate an evolutionary process. 
Discussion Questions 
1. Are the form and use of information and decision sup- 4. Refer to the Real World Case on Business Intelligence 
port systems for managers and business professionals rollouts in the chapter. How do companies know when 
changing and expanding? Why or why not? they need these types of systems? How do they make a 


decision on which projects to tackle? Discuss the role of 


2. Has the growth of self-directed teams to manage work ak ae: 
political dynamics in the latter. 


in organizations changed the need for strategic, tactical, 
and operational decision making in business? 5. In what ways does using an electronic spreadsheet 
package provide you with the capabilities of a decision 


3. What is the difference between the ability of a manager 
support system? 


to retrieve information instantly on demand using an 
MIS and the capabilities provided by a DSS? 
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6. Are enterprise information portals making executive in- 


formation systems unnecessary? Explain your reasoning. 


. Refer to the Real World Case on Goodyear, JEA, 
OSUMCG, and Monsanto in the chapter. Given the 
large a priori uncertainties associated with these tech- 
nologies, how do you make a business case for investing 
in them in the first place? Provide several ideas. 


. Can computers think? Will they ever be able to? 
Explain why or why not. 


9. Which applications of AI have the most potential value 


for use in the operations and management of a busi- 
ness? Defend your choices. 


10. What are some of the limitations or dangers you see in 


the use of AI technologies such as expert systems, 
virtual reality, and intelligent agents? What could be 
done to minimize such effects? 


Analysis Exercises 


1. e-Commerce Web Site Reviews 


BizRate.com 

BizRate (www.bizrate.com) instantly provides informa- 
tion about hundreds of online stores. Supported prod- 
uct lines include books, music, electronics, clothes, 
hardware, gifts, and more. Customer reviews help 
shoppers select products and retailers with confidence. 
BizRate also features a “Smart Choice” tag that bal- 
ances retailer reviews, price, and other variables to 
recommend a “best buy.” 


a. Use BizRate.com to check out a product of interest. 
How thorough, valid, and valuable were the product 
and retailer reviews to you? Explain. 

b. How could nonretail businesses use a similar Web- 
enabled review system? Give an example. 

c. How is BizRate’s Web site functionality similar to a 
decision support system (DSS)? 


. Enterprise Application Integration 
Digital Desktops 
Information coming from a variety of business systems 
can appear on the executive desktop as a consolidated 
whole. Often referred to as a “digital dashboard,” the 
information contained in such a view might include the 
executive's schedule, current e-mail, a brief list of pro- 
duction delays, major accounts past due, current sales 
summaries, and a financial market summary. Although it 
isn’t possible to fit all of an organization’s information 
on a single screen, it is possible to summarize data in 
ways specified by the executive and then act as a launch- 
ing point or portal for further point-and-click enquiries. 
How might such a system look? Portals such as my. 
Excite.com, my.MSN.com, iGoogle (www.google.com/ 
ig), and my. Yahoo.com make good general-purpose 
information portals. These Web sites contain character- 
istics in common with their business-oriented brethren. 
They provide information from many different sources 
such as e-mail, instant messages, calendars, tasks lists, 
stock quotes, weather, and news. They allow users to 
determine what information sources they see; for exam- 
ple, a user may choose to list only business-related news 
and omit sports, lottery results, and horoscopes. They 
also allow users to filter the information they see; for 
example, a user may choose to view only local weather, 


news containing specific keywords, or market results 
only for stocks the user owns. They allow users to 
arrange their own information space so that informa- 
tion a user finds most important appears in the right 
place. Finally, they allow users to drill down into the 
information they find important to receive more 
detail. 

Once a user has set up an account and identified his 
or her preferences, these public portals remember the 
user’s preferences and deliver only what the user has 
requested. Users may change their preferences as often 
as they wish, and the controls to make these changes 
require only point-and-click programming skills. 


a. Visit one of the portal sites listed above. Configure 
the site to meet your own information needs. Pro- 
vide a printout of the result. 

b. Look up Digital Dashboard on the 20/20 Software 
Web site (www.2020software), read about products 
with this feature, and describe these products in 
your own words. 


. Case-Based Marketing 


Selling on Amazon.com 
A case-based reasoning system is a type of expert sys- 
tem. It attempts to match the facts on hand to a data- 
base of prior cases. When a case-based reasoning 
system finds one or more cases in its database that 
closely match the facts at hand, it then evaluates and re- 
ports the most common outcomes. Given enough cases, 
such a system can prove very useful. Even better, if a 
case-based system automatically captures cases as they 
occur, then it will become a powerful tool that continu- 
ally fine-tunes its results as it gains “experience.” 
Amazon.com relies on just such a system to refer 
books to its customers. Like many e-commerce sites, 
Amazon allows visitors to search for, buy, and review 
books. Amazon.com takes its database interactivity a 
step further. Given a particular book title, its case-based 
reasoning engine examines all past sales of that book to 
see if the customers who bought that book shared other 
book purchases in common. It then produces a short 
list and presents that list to the user. The overall effect 
approaches that of a sales clerk who says, “Oh! If you 
like this book, then you'll really like reading these 


as well.” Amazon’s system has the experience of 
hundreds of millions more transactions than even 
the most wizened and well-read sales clerk. 

Equipped with this information, customers may 
consider purchasing additional books, or the informa- 


tion may increase customers’ confidence that they have 


selected the right book. Better information increases 
customers’ confidence in their purchases and encour- 
ages additional sales. 


a. What is the source of expertise behind Amazon’s 
online book recommendations? 
b. How do you feel about online merchants tracking 


your purchases and using this information to recom- 


mend additional purchases? 


c. What measures protect consumers from the govern- 


ment’s obtaining their personal shopping histories 
maintained by Amazon? 

d. Although Amazon doesn’t share personal informa- 
tion, it still capitalizes on its customers’ shopping 


data. Is this ethical? Should Amazon offer its custom- 
ers the right to opt out of this information gathering? 


. Palm City Police Department 

Goal Seeking 

The Palm City Police Department has eight defined 
precincts. The police station in each precinct has pri- 


mary responsibility for all activities in its precinct area. 
The table lists the current population of each precinct, 


the number of violent crimes committed in each 
precinct, and the number of officers assigned to each 
precinct. The department has established a goal of 


equalizing access to police services. Ratios of population 


per police officer and violent crimes per police officer 


should be calculated for each precinct. These ratios for 


the city as a whole are shown at right. 
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a. Build a spreadsheet to perform this analysis and 


print it out. 


. Currently, no funds are available to hire additional 


officers. On the basis of the citywide ratios, the de- 
partment has decided to develop a plan to shift re- 
sources as needed to ensure that no precinct has 
more than 1,100 residents per police officer and no 
precinct has more than seven violent crimes per po- 
lice officer. The department will transfer officers 
from precincts that easily meet these goals to pre- 
cincts that violate one or both of these ratios. Use 
“goal seeking” on your spreadsheet to move police 
officers between precincts until the goals are met. 
You can use the goal seek tool to see how many offi- 
cers would be required to bring each precinct into 
compliance and then judgmentally reduce officers in 
precincts that are substantially within the criteria. 
Print out a set of results that allow the departments 
to comply with these ratios and a memorandum to 
your instructor summarizing your results and the 
process you used to develop them. 


Violent Police 

Precinct Population Crimes Officers 
Shea Blvd. 96,552 318 85 
Lakeland Heights 99,223 582 108 
Sunnydale 68,432 206 77 
Old Town 47,732 496 55 
Mountainview 101,233 359 82 
Financial District 58,102 511 70 
Riverdale 78,903 537 70 
Cole Memorial 75,801 306 82 
Total 625,978 3,315 629 
Per Officer 995.196 5.270 


Harrah’s Entertainment, LendingTree, 


REAL WORLD 


DeepGreen Financial, and Cisco 


Systems: Successes and Challenges 
of Automated Decision Making 


or over half a century, the field of artificial intelligence 

(AD has promised that computers would relieve man- 

agers and professionals of the need to make certain 
types of decisions. Computer programs would analyze data 
and make sound judgments, whether it be to configure a 
complex computer, diagnose and treat a patient’s illness, or 
determine when to stir a big vat of soup, with little or no 
human help. 

Automated decision making has been slow to material- 
ize. Many early artificial intelligence applications were just 
solutions looking for problems, contributing little to im- 
proved organizational performance. In medicine, for example, 
doctors showed little interest in having machines diagnose 
their patients’ diseases. In the business sector, even when ex- 
pert systems were directed at real issues, extracting the right 
kind of specialized knowledge from seasoned decision mak- 
ers and maintaining it over time proved to be more difficult 
than anticipated. 

Now, automated decision making is finally coming of 
age. The new generation of applications, however, differs 
from prior Al-based decision support systems in several im- 
portant respects. To begin with, the new systems are easier 
to create and manage than earlier ones, which leaned heavily 
on the expertise of knowledge engineers. What’s more, the 
new applications do not require anyone to identify the prob- 
lems or to initiate the analysis. Indeed, decision-making ca- 
pabilities are embedded into the normal flow of work, and 
they are typically triggered without human intervention: 
‘They sense online data or conditions, apply codified knowl- 
edge or logic, and make decisions—all with minimal amounts 
of human intervention. Finally, unlike earlier systems, the 
new ones are designed to translate decisions into action 
quickly, accurately, and efficiently. 

Of course, there is still a role for people. Managers 
still need to be involved in reviewing and confirming deci- 
sions and, in exceptional cases, in making the actual deci- 
sions. Also, even the most automated systems rely on 
experts and managers to create and maintain rules and 
monitor the results. 

‘Today’s automated decision systems are best suited for 
decisions that must be made frequently and rapidly, using 
information that is available electronically. The knowledge 
and decision criteria used in these systems need to be highly 
structured, and the factors that must be taken into account 
must be well understood. If experts can readily codify the 
decision rules and if high-quality data are available, the con- 
ditions are ripe for automating the decision. 

Bank credit decisions are a good example: They are re- 
petitive, are susceptible to uniform criteria, and can be made 
by drawing on the vast supply of consumer credit data that 
are available. A decision about whom to hire as CEO, by 
contrast, would be a poor choice. It occurs only rarely, and 
different observers are apt to apply their own criteria, such 
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as personal chemistry, which cannot be easily captured in a 
computer model. 

The transportation industry was one of the first to em- 
ploy automated decision making on a large scale. After being 
used initially by airlines to optimize seat pricing, decision- 
making technology has since been applied to a variety of 
areas, including flight scheduling and crew and airport staff 
scheduling. 

Yield-management programs have also been adopted in 
related businesses, such as lodging. For example, Harrah’s 
Entertainment, the world’s largest casino operator, makes 
several million dollars a month in incremental revenue by 
optimizing room rates at its hotels and offering different 
rates to members of its loyalty program based on projected 
demand. The use of yield-management systems for hotel 
room pricing is common, but combining it with loyalty man- 
agement programs is unusual. ‘The combination ensures that 
the best customers get the best prices and, in turn, these cus- 
tomers will reward the company with their loyalty. 

Investment firms have relied upon Al-based decision- 
making technology extensively for program trading and ar- 
bitrage. Yet much of the recent activity within the financial 
industry has revolved around creating new applications 
aimed at finding good banking and insurance customers and 
serving their needs. The widespread availability of online 
credit information and financial history, the need for differ- 
entiation through rapid customer service, and the rapid 
growth of online financial services providers have led to in- 
creases in automated decisions. 

‘To compete in the same arena as Lending Tree, lenders 
are forced to be more highly automated and are implement- 
ing automated decision engines to help them remain com- 
petitive. For example, DeepGreen Financial in Cleveland, 
Ohio, was created from the ground up to make use of auto- 
mated decision technology. DeepGreen originates loans in 
46 states through its Web site and through partnerships with 
Lending Tree, priceline.com, and Mortgagel T-com, based in 
New York City. It also offers home equity lending services 
for mortgage brokers and private-label or cobranded home 
equity lending technology and fulfillment services. Since its 
inception in 2000, DeepGreen’s Internet technology has 
been used to process more than 325,000 applications and 
originate more than $4.4 billion of home equity lines of 
credit, according to Jerry Selitto, the bank’s founding chief 
executive officer. 

DeepGreen created an Internet-based system that makes 
credit decisions within minutes by skimming off the customers 
with the best credit, enabling just eight employees to process 
some 400 applications a day. Instead of competing on the basis 
of interest rates, DeepGreen’s drawing card is ease of applica- 
tion and speedy approval. The company provides almost in- 
stantaneous, unconditional decisions without requiring 
traditional appraisals or upfront paperwork from borrowers. 


Customers can complete the application within five 
minutes, at which point the automated process begins: A 
credit report is pulled, the credit is scored, a property valu- 
ation is completed using online data, confirmations are 
made concerning fraud and flood insurance, and a final de- 
cision is made on the loan. In about 80 percent of the cases, 
customers receive a final decision within two minutes. (In 
some cases, DeepGreen is only able to offer a conditional 
commitment because some of the information—usually the 
valuation—is not available online.) After approval, the sys- 
tem selects a notary public located near the customer’s home 
and the customer chooses a closing date. All the loan docu- 
ments are automatically generated and express-mailed to 
the notary. 

DeepGreen’s competitive strategy is driven by the con- 
vergence of several factors. At its core, it relies on the ad- 
vancement of analytic and rule-based AI technologies 
without which the business would not be possible. It also 
leverages the bank’s deep understanding of changing market 
conditions and pricing dynamics. Together with Deep- 
Green’s extensive use of online information, these factors 
enable the company to tailor loan terms to the needs of indi- 
vidual borrowers. Moreover, the company’s focus on high- 
end customers makes it possible to offer speed, service, and 
convenience. Credit decisions involving affluent, low-risk 
borrowers are relatively easy to make. Finally, high-end 


CASE STUDY QUESTIONS 


1. Why did some previous attempts to use artificial intelli- 
gence technologies fail? What key differences of the 
new AlI-based applications versus the old cause the 
authors to declare that automated decision making is 
finally coming of age? 


2. What types of decisions are best suited for automated 
decision making? Provide several examples of successful 
applications from the companies in this case to illustrate 
your answer. 


3. What role do humans play in automated decision-making 
applications? What are some of the challenges faced by 
managers where automated decision-making systems 
are being used? What solutions are needed to meet 
such challenges? 


Chapter 9 / Decision Support Systems © 403 


borrowers tend to be Internet-savvy; if you build an online 
service that meets their specific needs, they will come. 

The consequences of not defining limits can be huge. 
Several years ago, during the e-commerce boom, Cisco Sys- 
tems, based in San Jose, California, belatedly found out that 
it was relying too heavily on its automated ordering and sup- 
ply chain systems. Management realized that many of the 
orders that had been entered on the books were not as firm 
as they assumed and, in all likelihood, would never be 
shipped. This glitch eventually forced Cisco to write off 
more than $2 billion in excess inventory. 

Over and above their close monitoring of risk levels, 
managers in charge of automated decision systems must also 
develop processes for managing exceptions. Among other 
things, they need to determine in advance what happens 
when the computer has too little data on which to make a 
decision (a frequent reason for allowing exceptions). Com- 
panies should have clear criteria for determining when cases 
cannot be addressed through automation and who should 
deal with the exceptions. They should also ensure that ex- 
ceptions are viewed internally as opportunities to learn, 
rather than as failures of the system. 


Source: Adapted from Thomas H. Davenport and Jeanne G. Harris, “Auto- 
mated Decision Making Comes of Age,” MIT Sloan Management Review, 
Summer 2005; Thomas H. Davenport, “Competing on Analytics,” Harvard 
Business Review, January 2006. 


REAL WORLD ACTIVITIES 


1. Use the Internet to find examples of companies that are 
using automated decision making or other business ap- 
plications of artificial intelligence. You might begin by 
looking for such information on the companies men- 
tioned in this case and their main competitors, and then 
widen your search to encompass other companies. 
What business benefits or challenges do you discover? 


2. Artificial intelligence applications in business, such as 
automated decision making, pose potential business 
risks, as evidenced by the Cisco Systems experience, 
and have the potential for other risks to business and 
human security and safety, for example. Break into 
small groups with your classmates to discuss such risks 
and propose controls and safeguards to lessen the possi- 
bility of such occurrences. 


M O D U L E IV Business Information 
a Technol 7 


Development 
Processes 


ow can business professionals plan, develop, and implement strategies 

and solutions that use information technologies to help meet the 

challenges and opportunities faced in today’s business environment? 
Answering that question is the goal of the chapter of this module, which con- 
centrates on the processes for planning, developing, and implementing IT-based 
business strategies and applications. 


e Chapter 10: Developing Business/IT Solutions introduces the traditional, 
prototyping, and end-user approaches to the development of information systems 
and discusses the processes and managerial issues in the implementation of new 
business applications of information technology, including the topics of user 
resistance and involvement and change management. 
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Business 
Applications 


Information 
Technologies, 


Development 
Processes 


DEVELOPING BUSINESS/IT SOLUTIONS 


Section I 

Developing Business Systems 
IS Development 

The Systems Approach 


Real World Case: PayPal: Going Global All Languages 
ata Time 


Systems Analysis and Design 

The Systems Development Life Cycle 
Starting the Systems Development Process 
Systems Analysis 

Systems Design 

End-User Development 


Technical Note: Overview of Object-Oriented Analysis 
and Design 


Section II 

Implementing Business Systems 
Implementation 

Implementing New Systems 


Real World Case: Blue Cross and Blue Shield and 
Others: Understanding the Science behind Change 


Project Management 

Evaluating Hardware, Software, and Services 
Other Implementation Activities 
Implementation Challenges 

User Resistance and Involvement 

Change Management 


Real World Case: Infosys Technologies: The 
Implementation Challenges of Knowledge Management 
Initiatives 


. Use the systems development process outlined 


in this chapter and the model of IS components 
from Chapter 1 as problem-solving frameworks 
to help you propose information systems solutions 
to simple business problems. 


. Describe and give examples to illustrate how you 


might use each of the steps of the information 
systems development cycle to develop and imple- 
ment a business information system. 


. Explain how prototyping can be used as an effec- 


tive technique to improve the process of systems 
development for end users and IS specialists. 


. Understand the basics of project management and 


their importance to a successful system develop- 
ment effort. 


. Identify the activities involved in the implementa- 


tion of new information systems. 


. Compare and contrast the four basic system con- 


version strategies. 


. Describe several evaluation factors that should be 


considered in evaluating the acquisition of hard- 
ware, software, and IS services. 


. Identify several change management solutions 


for user resistance to the implementation of new 
information systems. 
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SECTION I 


IS Development 


The Systems 
Approach 


Systems Thinking 


Developing Business Systems 


Suppose the chief executive of the company where you work asks you to find a 
Web-enabled way to get information to and from the salespeople in your company. 
How would you start? What would you do? Would you just plunge ahead and hope 
you could come up with a reasonable solution? How would you know whether your 
solution was a good one for your company? Do you think there might be a systematic 
way to help you develop a good solution to the CEO’s request? There is. It’s a problem- 
solving process called the systems approach. 

When the systems approach to problem solving is applied to the development of 
information systems solutions to business problems, it is called information systems de- 
velopment or application development. ‘This section will show you how the systems ap- 
proach can be used to develop business systems and applications that meet the business 
needs of a company and its employees and stakeholders. 

Refer to the Real World Case on the next page. We can learn a lot about the devel- 
opment challenges faced by global organizations from this example. See Figure 10.1. 


‘The systems approach to problem solving uses a systems orientation to define problems 
and opportunities and then develop appropriate, feasible solutions in response. Analyzing 
a problem and formulating a solution involves the following interrelated activities: 


1. Recognize and define a problem or opportunity using systems thinking. 
2. Develop and evaluate alternative system solutions. 

3. Select the system solution that best meets your requirements. 

4. Design the selected system solution. 


5. Implement and evaluate the success of the designed system. 


Using systems thinking to understand a problem or opportunity is one of the most 
important aspects of the systems approach. Management consultant and author Peter 
Senge calls systems thinking the fifth discipline. Senge argues that mastering systems 
thinking (along with the disciplines of personal mastery, mental models, shared vision, 
and team learning) is vital to personal fulfillment and business success in a world of 
constant change. The essence of the discipline of systems thinking is “seeing the forest 
and the trees” in any situation by: 


e Seeing interrelationships among systems rather than linear cause-and-effect chains 
whenever events occur. 


e Seeing processes of change among systems rather than discrete “snapshots” of 
change, whenever changes occur. 


One way of practicing systems thinking is to try to find systems, subsystems, and 
components of systems in any situation you are studying. This approach is also known 
as using a systems context or having a systemic view of a situation. For example, the busi- 
ness organization or business process in which a problem or opportunity arises could be 
viewed as a system of input, processing, output, feedback, and control components. 
‘Then to understand a problem and solve it, you would determine if these basic systems 
functions are being properly performed. See Figure 10.2. 


Example. The sales process of a business can be viewed as a system. You could then 
ask: Is poor sales performance (output) caused by inadequate selling effort (input), 
out-of-date sales procedures (processing), incorrect sales information (feedback), or 
inadequate sales management (control)? Figure 10.2 illustrates this concept. 


REAL WORLD 


hen you’re a global company that keeps ex- 
panding into new countries, how do you keep 
all of your consumer sites updated in the local 
language—without spending a ton of time and money? 
PayPal realized five years ago that if it didn’t solve this prob- 
lem it would hinder the e-commerce payment company’s ability 
to grow, says Matthew Mengerink, the company’s vice president 
of core technologies; his IT responsibilities include PayPal’s 
architecture and payment system infrastructure. Today, PayPal 
has rearchitected the software code for its site to allow simulta- 
neous refreshes for 15 locales ranging from France to Poland. 
In the development community, they call this unusual achieve- 
ment “polylingual simultaneous shipping” or “SimShip.” 
“This is a big problem that’s been around a long time,” 
says Ron Rogowski, a principal analyst for Forrester Research, 
who specializes in globalization issues. “For the most part, 
companies really do a poor job localizing content,” he says, 
noting that technology solutions in this area aren’t plentiful, 
and companies also must conquer organizational battles over 
who controls what content. “Companies would like to manage 
their translations better,” Rogowski says, “to realize internal 
and external cost savings. But the real benefit is the potential 
for revenue growth, the ability to roll into markets quickly.” 
That ability today translates into a large portion of 
PayPal’s bottom line: For PayPal, international business now 
represents 44 percent of net revenue, which was $582 million 
for the first quarter of 2008, a 32 percent increase year-over- 
year. As of late 2007, PayPal handles about $1,806 in payment 
volume per second; the company’s re-architected code played 
a key role in this increase. 


FIGURE 10.1 


TE 


5 LES 
Whip it 


PayPal has successfully overcome the challenge of 
being a global company that speaks the local 
language 


Source: QuickBooks® Screen Shots ©Intuit Inc. All Rights 
Reserved. 
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PayPal: Going Global All 
Languages at a Time 


PayPal, now part of online auction giant eBay, had to go 
global to support customer desire, Mengerink says. People 
outside of the United States were demanding that eBay let 
them use PayPal (the primary purchase mechanism on eBay) 
and that PayPal be presented to them as seamlessly as it had 
been presented in English, he says. The company had to do 
more than present a stilted translation of English into, say, 
French or German, he adds. 

“Imagine you’re going into a bank and you want to speak 
French,” Mengerink says. “The teller can speak French. But 
that’s not enough. You want to feel you’re in France. You want to 
see the French flag on the wall. Especially in the banking indus- 
try, it was very important to express something that people trust, 
in such a way that it is natural and native for them,” he says. 

Traditionally, companies solve the localization issue by 
working with third-party translation companies, whose staff- 
ers convert an English-based site into multiple languages, 
says Mengerink. The problem: “If you can’t send them the 
smallest amount of text, it gets fantastically expensive,” 
Mengerink says. “Here at PayPal you have a full site experi- 
ence, you have to translate it, and we’re an Internet com- 
pany; we update the site every six weeks. How do you not 
slow the company down with the process of translation?” 

PayPal’s decision to custom-develop a solution is unu- 
sual and interesting. Few software vendors compete in the 
translation tools arena. Also, many companies can’t even 
overcome the organizational hurdles related to translation. 
“There’s a whole organizational issue that has to be looked 
at, who’s in charge of what,” says Rogowski. 

For example, he notes that a consumer electronics com- 
pany may not even have similar-looking content, never mind 
identical content, on Web sites in multiple countries. “A lot 
of times Web content springs up without any plan for cen- 
tralization,” he says. “Before your company can translate all 
of its sites efficiently, you may get embroiled in organiza- 
tional messes,” Rogowski warns, which is why some compa- 
nies are tackling the problem silo by silo. 

Not Paypal. Five years ago, Mengerink and a team of 
localization experts inside of IT began their project to fix the 
problem in a very centralized way. Often, Mengerink says, 
companies facing this problem try to cut and paste code, and 
then translate it into different languages; this can lead to trou- 
ble because it’s not simple to keep compressing and unifying 
the code. “It’s far easier to manipulate text than code,” he says. 

PayPal decided that it had to rearchitect its code to 
accommodate the language localization issue—purely for rea- 
sons of business speed, he says: “If you get the architecture 
right, you can get into new countries faster.” No commercial 
tools existed that fit the bill, Mengerink says, so all the devel- 
opment was done in-house with a small IT team; PayPal will 
not disclose the exact size of the team, or the cost metrics. 

“There’s this notion of a country code and a language 
code,” Mengerink says. “Your software has to understand 
two things: What country am I in and what language is being 
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read? This is extremely important because there are countries 
outside the United States where customers cannot imagine 
not having multiple languages, Canada for example. The first 
thing we said is put both codes everywhere,” Mengerink says. 
Then his developers had to create a code base with much 
more flexibility than the original; it had to convince the soft- 
ware, for instance, that strings of information such as e-mail 
addresses, customer support phone numbers, and time of day 
would change depending on the country code. 

The second key to the project’s success for PayPal: Ghassan 
Haddad, PayPal’s director of localization, and the develop- 
ment team created a tool that color codes text in the software 
code base to note newly added strings of text that will need 
translating. “People just program as if it’s in English,” 
Mengerink says. “At the same time, the software extracts the 
new pieces.” Then PayPal can send only the new pieces, in- 
stead of whole paragraphs, to the translation house. “This can 
take 5, 10 days depending on the size of the release,” 
Mengerink says. “Then off we go to the races, releasing si- 
multaneously in all locales.” 

So what’s the next challenge for Mengerink and his de- 
veloper team at PayPal? “We got very good at managing con- 
tent with engineering,” he says. “Now the question is, how 
we put that content management in the hands of business. 
They want to change it themselves without an intermediary. 
The business folks are saying ‘we respect you but pretty 
please can we do it ourselves?” That’s a challenge, he says, 
given that the development toolset will continue to grow. 

By the way, PayPal isn’t looking to license the technol- 
ogy it developed. “Our tools are built for PayPal,” Mengerink 
says. “We’re encouraging others to build it for themselves.” 
Although his team worked primarily in HTML, the pro- 
gramming language is not the important choice, he says. 
“Think about the methodology. That’s a really critical part. 
We built custom tools and they literally change every six 


CASE STUDY QUESTIONS 


1. One of the challenges that PayPal faces now that they 
have managed to overcome the polylingual obstacle is 
finding the best way to put this functionality in the hands 
of the business, so that they do not have to go through 
IT each time. How do you balance this need for respon- 
siveness and flexibility versus IT’s need to keep some de- 
gree of control to make sure everything keeps working 
with everything else? Provide some recommendations to 
managers who find themselves in this situation. 


2. PayPal opted to deviate from industry standards and 
build their own custom technology that would better 
suit their needs. When is it a good idea for companies 
to take this alternative? What issues factor into that de- 
cision? Provide a discussion and some examples. 


3. Although the new system has been quite successful, 
PayPal has chosen not to license this technology to others, 
forgoing a potentially important revenue stream given the 
lack of good solutions to this problem. Why do you think 
PayPal chose not to sell this technology? Do you really 
think this can be made into a strategic advantage over 
their competitors? How easy would it be for their com- 
petitors to imitate this accomplishment? 


months. This is a nascent industry. When you start looking 
at the publishing tools and content tools, most are appropri- 
ate for preview and publish,” he says. 

That’s a simpler model than what PayPal does, for exam- 
ple, frequently linking new content with new features, he 
notes. “There was a lot of fear, a lot of people saying, ‘Why 
aren’t we being industry standard?’ Leverage what you can, but 
you have to be good at creating your own tools. In the begin- 
ning, there was a lot of healthy skepticism, even internally,” 
Mengerink says. “Some of your execs and developers will note 
that their last company tried to do simultaneous shipping and 
failed,” he says. “Some people in the developer community still 
don’t think it’s possible,” he adds. “Once it was done, we saw 
that it’s not just manageable, it’s a core advantage.” 

The sooner your company can start working on a Sim- 
Ship project, the better: “Once you get too big, you can’t 
afford the interrupt to the cycle,” he notes. 

“Very early on, you have to create the generic structures 
for the code,” he says. “Build every next thing correct.” 

What’s the bottom line for PayPal from Mengerink’s 
team’s work? “Today, we have 15 languages, 17 currencies, 
190 markets,” he says. “Our code base has grown a lot. All of 
the new code is being built using the right structure. You 
have to build internationalized.” PayPal’s re-architected code 
base now keeps e-commerce humming as the company con- 
tinues to expand: PayPal’s net total payment volume for 
2007, the total value of transactions, was $47 billion, a gain 
of 33 percent over the previous year. 

‘To put that in context, PayPal’s net total payment volume 
for fourth quarter 2007, $14 billion, represented almost 
12 percent of U.S. e-commerce, and almost 8 percent of global 
e-commerce. 


Source: Adapted from Laurianne McLaughlin, “How PayPal Keeps 
e-Commerce Humming in 15 Languages at Once,” CIO Magazine, 
March 14, 2008. 


REAL WORLD ACTIVITIES 


1. Choose two or three companies with global operations 
that interest you and visit their Web sites for countries 
other than the United States. Even if you are not famil- 
iar with the language, do the Web sites have the same 
look and feel of the U.S. site? In which ways are they 
similar, and in which ways are they different? If you did 
not know, would you have guessed it was the same com- 
pany? Prepare a presentation with screenshots to share 
your findings with the rest of the class. 


2. Although PayPal opted for a centralized approach to 
keep consistency across Web site appearance and con- 
tent, other companies let both of these vary for each of 
the countries in which they operate. When would you 
use one or the other approach? Would it depend on the 
company, products offered, markets, countries, or on 
another factor? Break into small groups with your class- 
mates to discuss these issues. 


FIGURE 10.2 


An example of systems 
thinking. You can better 
understand a sales problem 
or opportunity by 
identifying and evaluating 
the components of a sales 
system. 


Systems 
Analysis and 
Design 


The Systems 
Development 
Life Cycle 
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Control 


Incorrect 


Feedback Sales Information? 


Inadequate 


Input Processing Output 


The overall process by which information systems are designed and implemented 
within organizations is referred to as systems analysis and design (SA&D). Within this 
process are contained activities that include the identification of business problems; 
the proposed solution, in the form of an information system (IS), to one or more of 
the problems identified; and the design and implementation of that proposed solution 
to achieve the desired and stated goals of the organization. 

‘Today, there are many approaches to SA&D. The two most common approaches 
are object-oriented analysis and design and the life cycle approach. Although each 
has its advantages and disadvantages, and the two approaches differ in many respects, 
they both are concerned with the analysis and design of a successful information sys- 
tem. In most cases, the choice of approach will depend on the type of system under 
study and the degree to which users are able to specify their needs and requirements 
clearly. A thorough discussion of both approaches is beyond the scope of this text, but 
we provide a brief overview of the object-oriented approach, with a focus on the most 
common method: the life cycle approach. 

Along with an overview of the two most common approaches, it is important to 
note that a wide variety of approaches have been developed over the years to address 
shortcomings in previous methods. Some claim to shorten cycle time or project length. 
Others claim to create a parallel tasking environment where multiple steps can be ex- 
ecuted simultaneously. Still others focus on improving defect rates in the program- 
ming phase of a project. To pay adequate attention to this wide variety of development 
approaches would take many volumes and is clearly beyond the scope of this text. The 
good news is that if you understand the basic concepts of the two main development 
approaches, you can easily understand the nuances in all other approaches. No matter 
what the name or the approach, the fundamental issues remain the same. This is why 
we have chosen to focus our attention on the life cycle approach as it lays the founda- 
tion for all other approaches. 


One method of using the systems approach to develop information system solutions, 
and the one that is most prevalent in organization systems analysis and design, can be 
viewed as a multistep, iterative process called the systems development life cycle 
(SDLC). Figure 10.3 illustrates what goes on in each stage of this process: (1) investiga- 
tion, (2) analysis, (3) design, (4) implementation, and (5) maintenance. 

It is important to realize, however, that all of the activities involved in the SDLC 
are highly related and interdependent. Therefore, in actual practice, several develop- 
mental activities may be occurring at the same time, and certain activities within a 
given step may be repeated. Therefore, both users and systems analysts may recycle 
back at any time to repeat previous activities to modify and improve a system under 
development. We discuss the activities and products of each step of the systems devel- 
opment cycle in this chapter. 
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FIGURE 10.3 


The traditional information 
systems development life 
cycle. Note how the five 
steps of the cycle are based 
on the stages of the systems 
approach. Also note the 
products that result from 
each step in the cycle and 
that you can recycle back to 
any previous step if more 
work is needed. 


Starting the 
Systems 
Development 
Process 


Feasibility Studies 


= Determine how to address business 
opportunities and priorities. 

= Conduct a feasibility study to determine 
whether a new or improved business 
system is a feasible solution. 

= Develop a project management plan and 
obtain management approval. 


Systems 


Understand the Investigation 


Business 
Problem or 
Opportunity 


a Analyze the information needs of 
employees, customers, and other 
business stakeholders. 

= Develop the functional requirements 
of a system that can meet business 
priorities and the needs of all 
stakeholders. 


m Develop logical models of current system. 


Develop an 
Information 
System 
Solution 


= Develop specifications for the hardware, 
software, people, network, and data 
resources, and the information products 
that will satisfy the functional 
requirements of the proposed business 
information system. 


= Develop logical models of new system. 


Systems 
Design 


m Acquire (or develop) hardware and 
software. 


m Test the system, and train people to 
operate and use it. 


= Convert to the new business system. 


= Manage the effects of system 
changes on end users. 


Systems 


Implement Implementation 


the 
Information 
System 
Solution 


m Use a postimplementation review 
process to monitor, evaluate, and 
modify the business system as 
needed. 


Systems 
Maintenance 


Do we have business opportunities? What are our business priorities? How can infor- 
mation technologies provide information system solutions that address our business 
priorities? These are the questions that have to be answered in the systems investiga- 
tion stage—the first step in the systems development process. This stage may involve 
consideration of proposals generated by a company’s business/IT planning process, 
which we will discuss in Chapter 12. Typically, the IT function performs feasibility 
studies to evaluate proposed information system solutions to meet a company’s busi- 
ness priorities and opportunities, as identified in its strategic planning process. 


Because the process of development can be costly, the systems investigation stage typi- 
cally requires the development of a feasibility study. At this stage, the feasibility study is 
a preliminary study that determines the information needs of prospective users and the 
resource requirements, costs, benefits, and feasibility of a proposed project. Then a 
team of business professionals and IS specialists might formalize the findings of this 
study in a written report that includes preliminary specifications and a developmental 
plan for a proposed business application. If the management of the company approves 
the recommendations of the feasibility study, the development process can continue. 


Operational 
Feasibility 


FIGURE 10.4 


Operational, economic, 
technical, human, and legal/ 
political factors. Note that 
there is more to feasibility 
than cost savings or the 
availability of hardware and 
software. 
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By design, the preliminary feasibility study of a project is a very rough analysis of 
its viability that must be continually refined over time. It is, nonetheless, a necessary 
first step in making the final commitment of organizational resources to the develop- 
ment of the proposed system. In some cases, however, the preliminary feasibility as- 
sessment is unnecessary. For extremely small or obvious projects, it may actually 
represent a waste of valuable time. Also, certain changes in the business environment 
may dictate the need for change, regardless of the assessed feasibility of such change. 
If the government changes the tax structure for employee income, an organization has 
no choice but to make the necessary changes to its payroll system. If a critical program 
has a major bug in it, the organization has no choice but to address and resolve it. In 
other words, there is little point in assessing the feasibility of a problem that must be 
solved. In these cases, the feasibility assessment may be better directed to the analysis 
of alternative approaches to the solution rather than the problem itself. Regardless, 
however, the conduct of a thorough preliminary feasibility study should be the default 
standard in the organization, and a decision to eliminate this first step in the process 
should always be carefully scrutinized and justified. 

Thus, the goal of the preliminary feasibility study is to evaluate alternative system 
solutions and propose the most feasible and desirable business application for develop- 
ment. The feasibility of a proposed business system can be evaluated in terms of five 
major categories, as illustrated in Figure 10.4. 


The operational feasibility assessment focuses on the degree to which the proposed 
development project fits with the existing business environment and objectives with 
regard to development schedule, delivery date, corporate culture, and existing busi- 
ness processes. Furthermore, this assessment determines the degree to which the 
project meets the specific business objectives set forth during the proposal phase. In 
the early stages of operational feasibility assessment, we are primarily interested in 
determining whether the identified problem is worth solving or the proposed solution 
actually solves the problem at hand. In addition, we must concern ourselves with an 
initial assessment of schedule feasibility—can we identify and solve the problem at 


Operational Feasibility Economic Feasibility 
e How well the proposed system sup- © Cost savings 
ports the business priorities of the el Ineroaccd E 


organization ; 
; e Decreased investment requirements 
e How well the proposed system will 


solve the identified problem e Increased profits 


e How well the proposed system will fit © Cost/benefit analysis 


with the existing organizational structure 


Technical Feasibility Human Factors Feasibility 


e Hardware, software, and network e Employee, customer, supplier 
capability, reliability, and availability acceptance 


e Management support 


© Determining the right people for 
the various new or revised roles 


Legal/Political Feasibility 


e Patent, copyright, and licensing 
e Governmental restrictions 


e Affected stakeholders and reporting 
authority 
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Economic Feasibility 


Technical Feasibility 


FIGURE 10.5 


Possible benefits of new 
information systems, with 
examples. Note that an 
opposite result for each of 
these benefits would be a 
cost or disadvantage of new 
systems. 


hand within a reasonable time period? In the latter stages of operational feasibility as- 
sessment, such as during the physical design phase of the SDLC, we shift focus to one of 
strategic fit and organizational impact, such as determining to what degree the proposed 
physical system will require changes in the organizational structure or what changes in 
the current spans of authority need to be made to accommodate the new system. 


The purpose of the economic feasibility assessment is to determine the extent to which 
the proposed system will provide positive economic benefits to the organization. This 
determination involves the identification and quantification of all benefits expected 
from the system, as well as the explicit identification of all expected costs of the project. 
In the early stages of the project, it is impossible to define and assess accurately all of 
the benefits and costs associated with the new system. Thus, the economic feasibility 
assessment is an ongoing process in which the definable short-term costs are constantly 
being weighed against the definable long-term benefits. If a project cannot be accu- 
rately judged as economically feasible using hard costs, then the project should not 
proceed, regardless of the other assessment category outcomes. 

The assessment of economic feasibility typically involves the preparation of a cost/ 
benefit analysis. If costs and benefits can be quantified with a high degree of certainty, 
they are referred to as tangible; if not, they are called intangible. Examples of tangible 
costs are the costs of hardware and software, employee salaries, and other quantifiable 
costs needed to develop and implement an IS solution. Intangible costs are difficult to 
quantify; they include the loss of customer goodwill or employee morale caused by 
errors and disruptions arising from the installation of a new system. 

Tangible benefits are favorable results, such as the decrease in payroll costs caused 
by a reduction in personnel or a decrease in inventory carrying costs caused by reduc- 
tion in inventory. Intangible benefits are harder to estimate. Such benefits as better 
customer service or faster and more accurate information for management fall into 
this category. Figure 10.5 lists typical tangible and intangible benefits with examples. 
Possible tangible and intangible costs would be the opposite of each benefit shown. 


The assessment of technical feasibility is focused on gaining an understanding of the 
present technical resources of the organization and their applicability to the expected 
needs of the proposed system. The analyst must assess the degree to which the current 
technical resources, including hardware, software, and operating environments, can be 
upgraded or added to, such that the needs of the proposed system can be met. If the 


Tangible Benefits Example 


e Increase in sales or profits e Development of IT-based products 


e Decrease in information processing costs ® Elimination of unnecessary documents 


e Decrease in operating costs e Reduction in inventory carrying costs 

e Decrease in required investment e Decrease in inventory investment required 
e Increased operational efficiency e Less spoilage, waste, and idle time 
Intangible Benefits Example 

e Improved information availability e More timely and accurate information 

e Improved abilities in analysis e OLAP and data mining 

e Improved customer service e More timely service response 

e Improved employee morale e Elimination of burdensome job tasks 


e Improved management decision making © Better information and decision analysis 
e Improved competitive position e Systems that lock in customers 


e Improved business image e Progressive image as perceived by 
customers, suppliers, and investors 


FIGURE 10.6 
Examples of how a 
feasibility study might 
measure the feasibility of a 
proposed e-commerce 
system for a business. 


Human Factors 
Feasibility 


Legal/Political 
Feasibility 
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Operational Feasibility Economic Feasibility 
e How well a proposed e-commerce e Savings in labor costs 
system fits the company’s plans for © Inereaced ake revenue 


developing Web-based sales, marketing, 


> 5 bas 
and financial systems Decreased investment in inventory 


e Increased profits 


e Acceptable return on investment 


Technical Feasibility Human Factors Feasibility 


e Capability, reliability, and availability of e Acceptance of employees 
Web store hardware, software, and A 


s Management support 
management services 


© Customer and supplier acceptance 


© Staff developers have necessary skills 


Legal/Political Feasibility 


e No patent or copyright violations 
e Software licensing for developer side only 
e No governmental restrictions 


© No changes to existing reporting 


authority 


current technology is deemed sufficient, then the technical feasibility of the project is 
clear. If this is not the case, however, the analyst must determine whether the technology 
necessary to meet the stated specifications exists. The danger here is that the project 
may require technology that does not yet exist in a stable form. Despite the claims of 
vendors that they can supply whatever is required, the analyst must be able to accu- 
rately assess the degree to which the needed technology exists in a form suitable for 
the proposed project. See Figure 10.6. 


It is one thing to assess the degree to which a proposed system can work and quite 
another to evaluate whether the system will work. The human factors feasibility 
assessment focuses on the most important components of a successful system imple- 
mentation: the managers and end users. No matter how elegant the technology, the 
system will not work if the end users and managers do not perceive it to be relevant 
and therefore do not support it. In this category, we assess the degree of resistance 
to the proposed system, the perceived role of end users in the development process, 
the degree of change to the end users’ working environment as a result of the new 
system, and the current state of human resources available to conduct the project 
and manage and use the system on completion. 


This category of assessment is often overlooked during the early stages of project ini- 
tiation and analysis. The legal/political feasibility of a proposed project includes a 
thorough analysis of any potential legal ramifications resulting from the construction 
and implementation of the new system. Such legal issues include copyright or patent 
infringements, violation of existing antitrust laws (e.g., the antitrust suit brought 
against Microsoft Corporation over Windows and Internet Explorer by the U.S. Justice 
Department in 1998), foreign trade restrictions, or any existing contractual obligations 
of the organization. 

The political side of the assessment focuses on gaining an understanding of who 
the key stakeholders within the organization are and the degree to which the proposed 
system may positively or negatively affect the distribution of power. Such distribution 
can have major political repercussions and may cause disruption or failure of an other- 
wise relevant development effort. 
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Systems 
Analysis 


Organizational 
Analysis 


Analysis of the 
Present System 


Wal-Mart and 
Others: Stress- 
Testing Web Sites 
for the Holiday 
Season 


What is systems analysis? Whether you want to develop a new application quickly or 
are involved in a long-term project, you will need to perform several basic activities of 
systems analysis. Many of these activities are extensions of those used in conducting a 
feasibility study. However, systems analysis is not a preliminary study. It is an in-depth 
study of end-user information needs that produces functional requirements that are used 
as the basis for the design of a new information system. Systems analysis traditionally 
involves a detailed study of: 


e The information needs of a company and end users like yourself. 


e The activities, resources, and products of one or more of the present information 
systems being used. 


e The information system capabilities required to meet your information needs and 
those of other business stakeholders that may use the system. 


An organizational analysis is an important first step in systems analysis. How can peo- 
ple improve an information system if they know very little about the organizational 
environment in which that system is located? They can’t. That’s why the members of 
a development team have to know something about the organization, its management 
structure, its people, its business activities, the environmental systems it must deal 
with, and its current information systems. Someone on the team must know this infor- 
mation in more detail for the specific business units or end-user workgroups that will 
be affected by the new or improved information system being proposed. For example, 
a new inventory control system for a chain of department stores cannot be designed 
unless someone on a development team understands a great deal about the company 
and the types of business activities that affect its inventory. That’s why business end 
users are frequently added to systems development teams. 


Before you design a new system, it is important to study the system that will be im- 
proved or replaced (assuming there is one). You need to analyze how this system uses 
hardware, software, network, and people resources to convert data resources, such as 
transactions data, into information products, such as reports and displays. Then you 
should document how the information system activities of input, processing, output, 
storage, and control are accomplished. 

For example, you might evaluate the format, timing, volume, and quality of input 
and output activities. Such user interface activities are vital to effective interaction be- 
tween end users and a computer-based system. Then, in the systems design stage, you 
can specify what the resources, products, and activities should be to support the user 
interface in the system you are designing. 


What if, in the days leading up to Christmas, a crush of shoppers forced a retailer to 
lock its doors during peak business hours? Unimaginable—but that’s exactly what 
happened to varying degrees at the Web stores for Wal-Mart, Macy’s, and other re- 
tailers as the 2006 holiday season got off to a blazing start. 

Wal-Mart’s failure on Black Friday, the day after Thanksgiving, was the most 
stunning. Walmart.com was down for a total of about 10 hours that day, according to 
Internet monitoring firm Keynote Systems, forcing it to greet shoppers at times with 
a “come back later” notice. “I’m afraid it was too much of a good thing on Friday,” a 
Wal-Mart spokesman said. Wal-Mart expected order activity to be double the level 
on the previous year’s Black Friday, but it came in at seven times the previous year’s 
volume. Wal-Mart had set big online goals for that holiday season, having spent 
13 months adding faster checkouts and an interactive toy section, the kind of features 
it hoped will lure about 300 million visitors. Not if the door’s closed they won't. 


Logical Analysis 


Functional 
Requirements 
Analysis and 
Determination 
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Macy’s site performed poorly for about nine hours on that Black Friday, accord- 
ing to Keynote, and was down for about an hour that day and then again part of the 
following Tuesday. Zappos’ and Foot Locker’s sites also had some performance prob- 
lems. Keynote says most sites, including Wal-Mart’s, recovered Monday and didn’t 
have major problems that day. 

With the Web bringing in increasingly significant sales, why would retailers drop 
the ball on site performance? In most cases, they aren’t. Many conduct load testing, 
forecasting, and monitoring using tools from companies such as Keynote and Gomez, 
and they use content distribution networks to speed performance. They build their 
e-commerce infrastructures with an eye on performance, with redundancy at com- 
mon failure points. But sites can still fail. 

One reason is that the various teams—marketing, site designers, QA testers—too 
often aren’t watching or sharing the same metrics, says Matthew Poepsel, VP of pro- 
fessional services at Gomez. If groups worry only about their metrics—marketing 
pushes a promotion, for instance, without being sure site design and capacity can 
handle it—you have “individual success but collective failure,” he says. When a prob- 
lem hits, Poepsel says, 80% of the recovery time is spent identifying the problem. 
“Once you know what the problem is, you can get it fixed pretty quickly, unless it’s a 
sheer bandwidth issue and you need to cut a new contract,” he says. 

Customers are ruthlessly unforgiving of poor performance. In a Gomez survey of 
1,173 online shoppers, 53% say they'll switch to a competitor if a site takes too long 
to load, and 21% will call customer service. When testing their systems for load ca- 
pacity in preparation for Black Friday, retailers typically used twice the capacity their 
sites had on the same day last year, says Keynote, which equates that level to a 600% 
increase over an average shopping day outside of the holidays. 

Stores that kept their sites up did blockbuster business. However, when a major 
competitor’s site fails, others pick up a rush of new customers that stresses their sites. 
There’s less time than ever to react to shifts in traffic, too. 


Source: Adapted from Mary Hayes Weier, “Opening Holiday Weeks Show Uptime Isn’t Easy For Online Retailers,” 
InformationWeek, December 4, 2006. 


One of the primary activities that occurs during the analysis phase is the construction 
of a logical model of the current system. The logical model can be thought of as a 
blueprint of the current system that displays only what the current system does with- 
out regard to ow it does it. By constructing and analyzing a logical model of the cur- 
rent system, a systems analyst can more easily understand the various processes, 
functions, and data associated with the system without getting bogged down with all 
the issues surrounding the hardware or the software. Also, by creating a logical model, 
the various noncomputer components of a system can be incorporated, analyzed, and 
understood. For example, in the physical version of a system, a person’s inbox may be 
the location where new orders are stored until they have been entered into the com- 
puter. In the logical model, that inbox is treated just like a computer hard drive or 
other electronic storage media. In a logical sense, it is just another place to store data. 


This step of systems analysis is one of the most difficult. You may need to work as a 
team with IS analysts and other end users to determine your specific business informa- 
tion needs. For example, first you need to determine what type of information each 
business activity requires; what its format, volume, and frequency should be; and what 
response times are necessary. Second, you must try to determine the information 
processing capabilities required for each system activity (input, processing, output, 
storage, control) to meet these information needs. As with the construction of the logical 
model, your main goal is to identify what should be done, not bow to do it. 
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FIGURE 10.7 


Examples of functional 
requirements for a proposed 
e-commerce system for a 
business. 


Systems 
Design 


Prototyping 


Examples of Functional Requirements 


© User Interface Requirements 
Automatic entry of product data and easy-to-use data entry screens for Web customers. 


e Processing Requirements 
Fast, automatic calculation of sales totals and shipping costs. 


e Storage Requirements 
Fast retrieval and update of data from product, pricing, and customer databases. 


e Control Requirements 
Signals for data entry errors and quick e-mail confirmation for customers. 


When this step of the life cycle is complete, a set of functional requirements for 
the proposed new system will exist. Functional requirements are end-user information 
requirements that are not tied to the hardware, software, network, data, and people 
resources that end users presently use or might use in the new system. That is left to 
the design stage to determine. For example, Figure 10.7 shows examples of functional 
requirements for a proposed e-commerce application for a business. 


Once the analysis portion of the life cycle is complete, the process of systems design 
can begin. Here is where the logical model of the current system is modified until it 
represents the blueprint for the new system. This version of the logical model represents 
what the new system will do. During the physical design portion of this step, users and 
analysts focus on determining how the system will accomplish its objectives. This point 
is where issues related to hardware, software, networking, data storage, security, and 
many others will be discussed and determined. As such, systems design consists of design 
activities that ultimately produce physical system specifications satisfying the functional 
requirements that were developed in the systems analysis process. 

A useful way to look at systems design is illustrated in Figure 10.8. This concept 
focuses on three major products, or deliverables, that should result from the design 
stage. In this framework, systems design consists of three activities: user interface, 
data, and process design. This framework results in specifications for user interface 
methods and products, database structures, and processing and control procedures. 


During the design phase, the development process frequently takes the form of, or 
includes, a prototyping approach. Prototyping is the rapid development and testing 
of working models, or prototypes, of new applications in an interactive, iterative 


FIGURE 10.8 Systems design can be viewed as the design of user interfaces, data, and processes. 


Systems Design 


User Interface 
Design 


The Prototyping 
Process 


FIGURE 10.9 


Application development 
using prototyping. Note 
how prototyping combines 
the steps of the systems 
development cycle and 
changes the traditional 
roles of IS specialists and 
end users. 
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process that can be used by both IS specialists and business professionals. Prototyp- 
ing, as a development tool, makes the development process faster and easier, espe- 
cially for projects for which end-user requirements are hard to define. Prototyping 
has also opened up the application development process to end users because it 
simplifies and accelerates systems design. Thus prototyping has enlarged the role 
of the business stakeholders affected by a proposed system and helps enable a 
quicker and more responsive development process called agile systems development 
(ASD). See Figure 10.9. 


Prototyping can be used for both large and small applications. Typically, large busi- 
ness systems still require using a traditional systems development approach, but 
parts of such systems can frequently be prototyped. A prototype of a business ap- 
plication needed by an end user is developed quickly using a variety of application 
development software tools. The prototype system is then repeatedly refined until it 
is acceptable. 

As Figure 10.9 illustrates, prototyping is an iterative, interactive process. End users 
with sufficient experience with application development tools can do prototyping 
themselves. Alternatively, you could work with an IS specialist to develop a prototype 
system in a series of interactive sessions. For example, you could develop, test, and 
refine prototypes of management reports, data entry screens, or output displays. 

Usually, a prototype is modified several times before end users find it acceptable. 
Program modules are then generated by application development software using con- 
ventional programming languages. The final version of the application system is turned 
over to its end users for operational use. Although prototyping is a useful method of 
allowing an end user to develop small software applications, its real power is as a devel- 
opment tool, within a life cycle project, to assist analysts and users in finalizing the 


= Investigation/Analysis. End users identify their 
business needs and assess the feasibility of 
several alternative information system solutions. 


m Analysis/Design. End users and/or IS 
Develop specialists use application development tools 
Business System to interactively design and test prototypes 
Pre pes of information system components that 
meet end user business needs. 


Prototyping 
Cycle 


m Design/Implementation. The business 
system prototypes are tested, evaluated, and 
modified repeatedly until end users find them 
acceptable. 


Revise the 
Prototypes to Better 


Maintenance 
Cycle 


m |mplementation/Maintenance. The accepted 
Use and Maintain business system can be modified easily since 
most system documentation is stored on disk. 
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FIGURE 10.10 

An example of a typical 
application of prototyping 
during a software 
development project. 


User Interface 


Example of Prototyping Development 


e Team. A few end users and IS developers form a team to develop a business application. 


e Schematic. The initial prototype schematic design is developed. 


e Prototype. The schematic is converted into a simple point-and-click prototype using 
prototyping tools. 


e Presentation. A few screens and routine linkages are presented to users. 


e Feedback. After the team gets feedback from users, the prototype is reiterated. 


e Reiteration. Further presentations and reiterations are made. 


© Consultation. Consultations are held with IT consultants to identify potential improve- 
ments and conformance to existing standards. 


e Completion. The prototype is used as a model to create a finished application. 


e Acceptance. Users review and sign off on their acceptance of the new business system. 


e Installation. The new business software is installed on network servers. 


various interfaces and functions of a large business system. Figure 10.10 outlines a 
typical prototyping-based systems development process for a business application. 


Let’s take a closer look at user interface design, because it is the system component clos- 


Design est to business end users and the one they will most likely help design. The user interface 
design activity focuses on supporting the interactions between end users and their com- 
puter-based applications. Designers concentrate on the design of attractive and efficient 
forms of user input and output, such as easy-to-use Internet or intranet Web pages. 

As we mentioned previously, user interface design is frequently a prototyping proc- 
ess, in which working models or prototypes of user interface methods are designed 
and modified several times with feedback from end users. The user interface design 
process produces detailed design specifications for information products such as dis- 
play screens, interactive user/computer dialogues (including the sequence or flow of 
dialogue), audio responses, forms, documents, and reports. Figure 10.11 gives exam- 
ples of user interface design elements and other guidelines suggested for the multime- 
dia Web pages of e-commerce Web sites. Figure 10.12 presents actual before and after 
screen displays of the user interface design process for a work scheduling application 
of State Farm Insurance Company. 

FIGURE 10.11 Useful guidelines for the design of business Web sites. 

e Remember the Customer. Successful Web sites are e Searchability. Many sites have their own search en- 
built solely for the customer, not to make company vice gines; very few are actually useful. Make sure yours is. 
presidents happy. e Incompatibilities. A site that looks great on a PC 

e Aesthetics. Successful designs combine fast-loading using Internet Explorer can often look miserable on 
graphics and simple color palettes for pages that are an iBook running Netscape. 
easy to read. e Registration Forms. Registration forms are a use- 

e Broadband Content. The Web’ coolest stuff can’t be ful way to gather customer data. But make your 
accessed by most Web surfers. Including a little streaming customers fill out a three-page form, and watch 
video isn’t bad, but don’t make it the focus of your site. them flee. 

e Easy to Navigate. Make sure it’s easy to get from one © Dead Links. Dead links are the bane of all Web 
part of your site to another. Providing a site map, acces- surfers—be sure to keep your links updated. Many 
sible from every page, helps. Web-design software tools can now do this for you. 
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FIGURE 10.12 An example of the user interface design process. State Farm developers changed this work scheduling 
and assignment application’s interface after usability testing showed that end users working with the old interface (at left) didn’t 
realize that they had to follow a six-step process. If users jumped to a new page out of order, they would lose their work. The 
new interface (at right) made it clearer that a process had to be followed. 
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Source: Courtesy of the Usability Lab of State Farm. 


Google’s Interface: 
Balancing 
Freedom and 
Consistency 


For most people, including its own executives, Google still means search. On both 
the query page and the results pages, design flourishes have been legendarily kept 
to a minimum, with layout decisions based on what will provide the user with the 
fastest, most efficient service. Nonetheless, engineers and analysts pore over 
streams of data to assess the impact of experiments with colors, shading, and the 
position of every element on the page. Even changes at the pixel level can affect 
revenue. 

But as Google products proliferate beyond search, design decisions become more 
critical if the company wants a coherent brand image. “More than anything, Google 
prefers to make design decisions based on what performs well. And as a company, 
Google cares about being fast, so we want our user experience to be fast,” says Irene Au, 
Google’s director of user experience. That’s not just in terms of front-end latency— 
how long it takes the page to download—it’s also about making people use their com- 
puters more efficiently. “A lot of our design decisions are really driven by cognitive 
psychology research that shows that, say, people online read black text against a white 
background much faster than white against black, or that sans serif fonts are more 
easily read than serif fonts online,” says Au. 

Google has a big culture of being bottom-up and that can make it difficult to get 
a coherent design experience. ‘There’s a federation of people doing whatever they 
think is best for their product and not looking out for the bigger picture. “We don’t 
want everything to be dictated and top-down, but we do want to find a balance,” says 
Au. “For example, Google apps all look different from each other. As you move from 
one app to another, the keyboard shortcuts are different, the save model is different. 

‘The interaction consistency is not there. For good reason: “These were all differ- 
ent startups using different backends. But we’re trying to pull all that together. More 
and more, these experiences are going to get integrated with each other, or there’ll 
be reusable components that might be built for applications but also appear in a 
search experience. It’s becoming increasingly critical for us to have common UIs 
[user interfaces] and common infrastructure,” she notes. 

At Google, there’s top-down support for consistency, but not a mandate. But 
middle layers of management are hearing loud and clear from Larry Page and Sergey 
Brin and the executives that there should be one way to do things. 
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FIGURE 10.13 


Examples of system 
specifications for a new 
e-commerce system for a 
business. 
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“Inconsistency drives Larry and Sergey crazy. So there’s growing appreciation 
and awareness and with that comes motivation. As a group, we’re trying to be very 
opportunistic and pragmatic. The design team has to be a few steps out—we’re de- 
signing the target for all the different products to converge towards,” says Au. 


Source: Adapted from Helen Walters, “Google’s Irene Au: On Design Challenges,” BusinessWeek Online, March 18, 2009. 


Examples of System Specifications 


e User Interface Specifications 
Use personalized screens that welcome repeat Web customers and make product 
recommendations. 


e Database Specifications 
Develop databases that use object/relational database management software to organ- 
ize access to all customer and inventory data and to multimedia product information. 


e Software Specifications 
Acquire an e-commerce software engine to process all e-commerce transactions 
with fast responses—that is, retrieve necessary product data and compute all sales 
amounts in less than one second. 


e Hardware and Network Specifications 
Install redundant networked Web servers and sufficient high-bandwidth telecommu- 
nications lines to host the company e-commerce Web site. 


e Personnel Specifications 
Hire an e-commerce manager and specialists and a Webmaster and Web designer to 
plan, develop, and manage e-commerce operations. 


System specifications formalize the design of an application’s user interface methods 
and products, database structures, and processing and control procedures. Therefore, 
systems designers frequently develop hardware, software, network, data, and person- 
nel specifications for a proposed system. Figure 10.13 shows examples of system spec- 
ifications that could be developed for an e-commerce system of a company. 


In a traditional systems development cycle, your role as a business end user is similar 
to that of a customer or a client. Typically, you make a request for a new or improved 
system, answer questions about your specific information needs and information 
processing problems, and provide background information on your existing business 
systems. Then IS professionals work with you to analyze your problem and suggest 
alternative solutions. When you approve the best alternative, it is designed and imple- 
mented. Here again, you may be involved in a prototyping design process or be on an 
implementation team with IS specialists. 

However, in end-user development, IS professionals play a consulting role while 
you do your own application development. Sometimes a staff of user consultants may 
be available to help you and other end users with your application development ef- 
forts. This help may include training in the use of application packages; selection of 
hardware and software; assistance in gaining access to organization databases; and, of 
course, assistance in analysis, design, and implementing the business application of IT 
that you need. 


It is important to remember that end-user development should focus on the funda- 
mental activities of any information system: input, processing, output, storage, and 
control, as we described in Chapter 1. Figure 10.14 illustrates these system compo- 
nents and the questions they address. 
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FIGURE 10.14 End-user development should focus on the basic information processing activity components of an 
information system. 
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Source: Adapted from James N. Morgan, Application Cases in MIS, 4th ed. (New York: Irwin/McGraw-Hill, 2002), p. 31. 


In analyzing a potential application, you should focus first on the output to be 
produced by the application. What information is needed, and in what form should 
it be presented? Next, look at the input data to be supplied to the application. What 
data are available? From what sources? In what form? Then you should examine the 
processing requirements. What operations or transformation processes will be re- 
quired to convert the available inputs into the desired output? Among software 
packages the developer is able to use, which package can best perform the operations 
required? 

You may find that the desired output cannot be produced from the inputs that are 
available. If this is the case, you must either make adjustments to the output expected 
or find additional sources of input data, including data stored in files and databases 
from external sources. The storage component will vary in importance in end-user ap- 
plications. For example, some applications require extensive use of stored data or the 
creation of data that must be stored for future use. These are better suited for database 
management development projects than for spreadsheet applications. 

Necessary control measures for end-user applications vary greatly depending on the 
scope and duration of the application, the number and nature of the users of the ap- 
plication, and the nature of the data involved. For example, control measures are 
needed to protect against accidental loss or damage to end-user files. The most basic 
protection against this type of loss is simply to make backup copies of application files 
on a frequent and systematic basis. Another example is the cell protection feature of 
spreadsheets that protects key cells from accidental erasure by users. 


Doing End-User In end-user development, you and other business professionals can develop new or 
Development improved ways to perform your jobs without the direct involvement of IS specialists. 
The application development capabilities built into a variety of end-user software 
packages have made it easier for many users to develop their own computer-based 
solutions. For example, Figure 10.15 illustrates a Web site development tool you could 
use to help you develop, update, and manage an intranet Web site for your business 
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FIGURE 10.15 


Microsoft FrontPage is an 
example of an easy-to-use 


end-user Web site 
development tool. 
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unit. Or you might use an electronic spreadsheet package as a tool to develop an easy 
way to analyze weekly sales results for the sales managers in a company. Or you could 
use a Web site development package to design Web pages for a small business Web 
store or a departmental intranet Web site. Many companies are encouraging business 
end users to do their own Web site development. See Figure 10.16. 


Businesses increasingly accept the existence of a “shadow” IT culture, in which end 
users install uncontrolled rogue technology to make good the shortcomings of over- 
stretched IT departments. Rogue IT includes users who install software or tamper 
with existing software or macros without the IT department’s consent, according to 
a survey by integration specialist Blue Prism. Budget and resource constraints often 
lead to elements of rogue behavior, reported by 67 percent of respondents to the 
survey. Twenty-four percent believed that rogue IT isn’t used in their organizations, 
and 10 percent admitted that they didn’t know. 

These systems are not necessarily simple variations on the Excel spreadsheet. On 
the contrary, they can be very sophisticated—trivaling and even exceeding any tech- 
nological solution produced by IT departments. Such systems range from consumer 
solutions like Google Apps to highly tailored ones. It seems that end users are in- 
creasingly aware nowadays that their IT department cannot always deliver a practical 
solution for their needs, which can lead to the creation of a shadow IT culture within 
an organization, whereby users actively install their own applications or find their 
own workaround solutions in order to do their day-to-day job. 

This is often because IT departments have to manage business-critical projects, 
sometimes at the expense of helping business users with tactical change requests. 

Indeed, more than 52 percent reported that working on strategic projects was the 
main focus for their department, with 40 percent saying that delivering day-to-day 
business change requests was their priority. 

The Blue Prism survey, however, also challenges the traditional perception that 
IT departments frown upon rogue behavior by users. The survey concludes that 
many IT departments fully understand why pockets of rogue behavior exist, and it 
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reveals that these departments were equally pragmatic when asked for the best way 
of dealing with it. 

With this change in the relationship between end users and technology, the IT 
department’s singular claim to technology knowledge is disappearing, and with it, its 
position of power. The more technologists try to counter this effect by enforcing the 
old ways, the more defunct and isolated they will become; their decisions will be 
ignored and their solutions will be unused. 

One of the primary reasons shadow systems succeed is that people at the front- 
lines of organizations need them. 

They know that when they have a problem and when they find a solution that 
works well for them, their needs are met. IT departments, on the other hand, focus 
too strongly on the technology to solve a problem rather than on the problem 
itself{—to the extent that when end users do not use officially sanctioned solutions, 
IT may proceed on radical search-and-destroy missions of user-created systems. In 
doing so, it ignores why the user did not use its solutions in the first place and, in effect, 
it destroys one of the few sources of IT strategic and competitive advantage an 
organization has. 


Source: Adapted from Tom Jowitt, “‘Shadow IT Culture’ on the Rise for Businesses,” CIO Magazine, July 5, 2007; and 
Sandy Behrens, “Time to Rethink Your Relationship with End Users,” CIO Magazine, July 24, 2007. 


Encouraging End-User Web Development 


e Look for Tools that Make Sense 
Some Web development tools may be more powerful and more costly than what your 
business end users really need. 


e Spur Creativity 
Consider a competition among business departments for the best Web site to help 
spur users to more creative uses of their intranet sites. 


e Set Some Limits 
Yes, you have to keep some control. Consider putting limits on exactly what parts of a 
Web page users can change and who can change what pages. You still want some 
consistency across the organization. 


e Give Managers Responsibility 
Make business unit managers sign off on who will be Web publishing from their groups, 
and make the managers personally responsible for the content that goes on their Web 
sites. That will help prevent the publishing of inappropriate content by some users. 


e Make Users Comfortable 
‘Training users well on the tools will help them become confident in their ability to 
properly manage and update their sites—and save IT the trouble of fixing problems 
later on or providing continuous support for minor problems. 


As stated at the beginning of this chapter, there are two common approaches to analy- 
sis and design: SDLC and object-oriented. Whereas the SDLC remains the predomi- 
nant approach to software development, the object-oriented approach is gaining favor, 
particularly among programmers focusing on complex systems that require handling a 
wide variety of complex data structures, such as audio, video, images, documents, Web 
pages, and other types of data. 

We introduced the concepts of objects and object oriented databases in Chapter 5. 
Thorough coverage of the object-oriented approach to analysis and design is beyond 
the scope of this text, but a brief overview is presented here. Let’s begin with a simple 
definition of anything object-oriented. 
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An object-oriented system is composed of objects. An object can be anything a 
programmer wants to manage or manipulate—cars, people, animals, savings accounts, 
food products, business units, organizations, customers—literally anything. Once an 
object is defined by a programmer, its characteristics can be used to allow one object 
to interact with another object or pass information to another object. The behavior of 
an object-oriented system entails collaboration between these objects, and the state of the 
system is the combined state of all the objects in it. 

Collaboration between objects requires them to send messages or information to 
one another. The exact semantics of message sending between objects varies, de- 
pending on the kind of system being modeled. In some systems, “sending a message” 
is the same as “invoking a method.” In others, “sending a message” might involve 
sending data using a pre-prescribed media. The three areas of interest to us in an 
object-oriented system are object-oriented programming, object-oriented analysis, 
and object-oriented design. 

Object-oriented programming (OOP) is the programming paradigm that uses 
“objects” to design applications and computer programs. It employs several techniques 
from previously established paradigms, including 


e Inheritance. The ability of one object to inherit the characteristics of a higher- 
order object. For example, all cars have wheels; therefore, an object defined as a 
sports car and as a special type of the object cars must also have wheels. 


e Modularity. The extent to which a program is designed as series of interlinked 
yet stand-alone modules. 


e Polymorphism. The ability of an object to behave differently depending on 
the conditions in which its behavior is invoked. For example, two objects that 
inherit the behavior speak from an object class animal might be a dog object and 
a cat object. Both have a behavior defined as speak. When the dog object is 
commanded to speak, it will bark, whereas when the cat object is commanded 
to speak, it will meow. 


e Encapsulation. Concealing all of the characteristics associated with a particular 
object inside the object itself. This paradigm allows objects to inherit characteris- 
tics simply by defining a subobject. For example, the object airplane contains all 
of the characteristics of an airplane: wings, tail, rudder, pilot, speed, altitude, and 
so forth. 


Even though it originated in the 1960s, OOP was not commonly used in main- 
stream software application development until the 1990s. Today, many popular pro- 
gramming languages (e.g., ActionScript, Ada 95/2005, C#, C++, Delphi, Java, 
JavaScript, Lisp, Objective-C, Perl, PHP, Python, RealBasic, Ruby, Squeak, VB.Net, 
Visual FoxPro, and Visual Prolog) support OOP. 

Object-oriented analysis (OOA) aims to model the problem domain, that is, the 
problem we want to solve, by developing an object-oriented (OO) system. The source 
of the analysis is a set of written requirement statements and/or diagrams that illus- 
trates the statements. 

Similar to the SDLC-developed model, an object-oriented analysis model does 
not take into account implementation constraints, such as concurrency, distribution, 
persistence, or inheritance, nor how the system will be built. Because object-oriented 
systems are modular, the model of a system can be divided into multiple domains, each 
of which are separately analyzed and represent separate business, technological, or 
conceptual areas of interest. The result of object-oriented analysis is a description of 
what is to be built, using concepts and relationships between concepts, often expressed 
as a conceptual model. Any other documentation needed to describe what is to be 
built is also included in the result of the analysis. 

Object-oriented design (OOD) describes the activity when designers look for 
logical solutions to solve a problem using objects. Object-oriented design takes the 
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conceptual model that results from the object-oriented analysis and adds implementa- 
tion constraints imposed by the environment, the programming language, and the 
chosen tools, as well as architectural assumptions chosen as the basis of the design. 

The concepts in the conceptual model are mapped to concrete classes, abstract 
interfaces, and roles that the objects take in various situations. The interfaces and their 
implementations for stable concepts can be made available as reusable services. Concepts 
identified as unstable in object-oriented analysis will form the basis for policy classes that 
make decisions and implement environment or situation-specific logics or algorithms. 
The result of the object-oriented design is a detailed description of how the system can 
be built, using objects. 

Thus, the object-oriented world bears many similarities to the more conventional 
SDLC approach. This approach simply takes a different view of the programming 
domain and thus approaches the problem-solving activities inherent in system devel- 
opment from a different direction. 

In the next section, we will continue looking at systems development by changing 
our focus from design to implementation. 
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SECTION II 


Implementation 


Implementing 
New Systems 


Project Portfolio 
Management: 
Shoot the Bad 
Projects, Keep the 
Good Ones 


Implementing Business Systems 


Once a new information system has been designed, it must be implemented as a work- 
ing system and maintained to keep it operating properly. The implementation process 
we will cover in this section follows the investigation, analysis, and design stages of the 
systems development cycle we discussed in Section I. Implementation is a vital step in 
the deployment of information technology to support the employees, customers, and 
other business stakeholders of a company. 

Read the Real World Case on the next page. We can learn a lot from this case 
about the challenges companies face in implementing the changes needed for new 
TT-based business initiatives. See Figure 10.17. 


Figure 10.18 illustrates that the systems implementation stage involves hardware and 
software acquisition, software development, testing of programs and procedures, con- 
version of data resources, and a variety of conversion alternatives. It also involves the 
education and training of end users and specialists who will operate a new system. 

Implementation can be a difficult and time-consuming process. However, it is vital 
in ensuring the success of any newly developed system, for even a well-designed system 
will fail if it is not properly implemented. That is why the implementation process 
typically requires a project management effort on the part of IT and business unit 
managers. They must enforce a project plan that includes job responsibilities, timelines 
for major stages of development, and financial budgets. This plan is necessary if a 
project is to be completed on time and within its established budget while still meeting 
its design objectives. Figure 10.19 illustrates the activities and timelines that might be 
required to implement an intranet for a new employee benefits system in the human 
resource department of a company. 


IT departments are either the darlings or the despised of corporate America, and 
some practitioners would debate which extreme causes the most pain. Let’s face it; 
nowadays the reward for doing a great job is more work. Once an IT group earns the 
trust of business units, it must then survive the onslaught of new projects. Good or- 
ganizations, like good bosses, don’t want you to take on more than you can handle 
and collapse in the process. 

Smart organizations have a grip on project portfolio management (PPM) and are 
willing to prioritize and, when needed, end projects when they turn bad. Like risk 
management, PPM is nothing new for mature disciplines. “We’ve picked up where 
construction and engineers have been for years,” says John Nahm, an IT project 
manager for the state of Virginia. 

The highest performers in the IT world, as defined in a recent study by the IT 
Process Institute, are those most likely to cancel projects—at a rate double that of 
their lower-performing counterparts, in fact. “It’s counterintuitive until you think 
about it,” says Kurt Milne, managing director of the institute. The business world is 
accustomed to trying new initiatives but being willing to move on if they don’t work. 
But, as Milne points out, in IT there’s value in stability, so we’re hesitant to pull the 
trigger. “I don’t know that that’s a skill that IT folks think they need to have, but 
logically, it makes sense to shoot your bad projects and move on.” 

Line-of-business executives understand capacity planning and prioritization, 
Milne says, but they expect these choices to be presented in business language. 


(text continues on page 429) 


REAL WORLD 


CASE 


evin Sparks has been trying to get his staff to change 
the way it monitors and supports the data center for 
the past year, but he hasn’t been getting anywhere. 

Not that he’s getting resistance—at least not overtly. 
His staffers at Blue Cross and Blue Shield of Kansas City 
agree that installing automated monitoring software, along 
with a centralized control room and a set of standard proc- 
esses for responding to problems, would be more efficient 
than the way they deal with things now, which is mostly 
through ad hoc heroism. 

“Logic always prevails and everyone will agree—at the 
intellectual level—that we need to change things,” says 
Sparks, who is vice president and CIO. Then he finds himself 
surrounded by empty chairs at meetings while the people 
who should be sitting there are off fighting the latest fire. 

“T tell them I need them at the meetings and if we 
changed things they’d have the time to be there. But things 
always break down when we talk about taking monitoring 
out of their hands through automation,” Sparks says. 

‘To help his staff accept the new processes, Sparks says he’s 
taken layoffs off the table, even though the proposed automa- 
tion and process efficiencies could reduce the need for bodies. 
The change is part of a larger effort to implement the IT Infra- 
structure Library (ITIL) process framework to improve overall 
productivity. “I don’t want fewer people; I want the ones I have 
to do more things,” he says, sighing with frustration. 

In other words, Sparks’s staff doesn’t seem to have any 
logical reason for resisting the changes; but before you dis- 
miss them as a bunch of inflexible, fearful losers, know this: 
They are you, and you are them. 


FIGURE 10.17 


Understanding the science behind change and 

__ resistance can lead to more effective approaches 
to foster involvement and smooth out transitions 
to new systems. 
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Blue Cross and Blue Shield 
and Others: Understanding the 
Science behind Change 


Maybe your resistance to change manifests itself in a dif- 
ferent way or in a different setting; for example, it might be a 
refusal to throw away that old slide rule, to look while the nurse 
draws your blood, or to dance at weddings. We all refuse to 
change our ways. This happens for reasons that are often hard 
to articulate, until you begin to look at it from a scientific per- 
spective. In the past few years, improvements in brain analysis 
technology have allowed researchers to track the energy of a 
thought coursing through the brain in much the same way that 
they can track blood flowing through the circulatory system. 

These advances are bringing a much-needed hard foun- 
dation of science to a leadership challenge that to CIOs has 
long seemed hopelessly soft and poorly defined: change 
management. Pictures of the brain show that our responses 
to change are predictable and universal. 

From a neurological perspective, we all respond to 
change in the same way: We try to avoid it. Yet understand- 
ing the brain’s chemistry and mechanics has led to insights 
that can help CIOs ameliorate the pain of change and im- 
prove people’s abilities to adapt to new ways of doing things. 

Change hurts. Not the boo-hoo, woe-is-me kind of hurt 
that executives tend to dismiss as an affliction of the weak and 
sentimental, but actual physical and psychological discomfort. 

The brain pictures actually prove it. Change lights up an 
area of the brain, the prefrontal cortex, which is like RAM 
memory in a PC. The prefrontal cortex is fast and agile, able 
to hold multiple threads of logic at once to enable quick cal- 
culations. Like RAM, the prefrontal cortex’s capacity is finite; 
it can deal comfortably with only a handful of concepts be- 
fore bumping up against limits. That bump generates a pal- 
pable sense of discomfort, producing fatigue and even anger. 

Resistance to change is not inevitable. The prefrontal 
cortex has its limitations, but it is also capable of insight and 
self-control. The ability to be aware of our habitual impulses 
and do something about them is what makes us human. 

“The prefrontal cortex is extremely influential in our be- 
havior, but it does not have to be completely determinative,” 
says Jeffrey M. Schwartz, research psychiatrist at the School 
of Medicine at the University of California at Los Angeles. 
“We can make decisions about how much we want to be 
influenced by our animal biology.” 

Unfortunately, traditional change management tactics are 
based more in animal training than in human psychology. Lead- 
ers promise bonuses and promotions to those who go along 
with the change (the carrot), and they punish those who don’t 
with less important work and the potential loss of their jobs (the 
stick). “The carrot-and-stick approach works at the systemwide 
level—offering cash bonuses to the sales department to in- 
crease the number of customers in Latin America will get you 
more customers there, for example—but at a personal level it 
doesn’t work,” says David Rock, founder and CEO of Results 
Coaching Systems, a consulting firm. “Our personal motiva- 
tions are too complex, and you can only offer so many raises.” 


428 © Module IV / Development Processes 


Patience is critical, says Rock. “You have to paint a broad 
picture of change and resist the urge to fill in all the gaps for 
people,” he says. 

“They have to fill them in on their own. If you get too 
detailed, it prevents people from making the connections on 
their own.” Leaving holes in any plan is especially hard for 
CIOs, who tend to be ambitious and process-oriented, which 
means they have thought out all the details involved in a 
strategy or systems change and believe they know all the 
steps required to get there. In general, they’re bursting with 
the need to tell everyone exactly how to do it. 

“When I put out change proposals, it’s obvious to me 
why we should be changing, so when people resist I tend to 
get more aggressive in trying to convince them,” says Matt 
Miszewski, CIO of the state of Wisconsin. “But we lose peo- 
ple in that situation. The more we try to explain things, the 
more dug in they get.” 

‘To try to focus people’s attention on personal insight and 
change their behavior, Rock uses the same technique that 
psychoanalysts have used since the profession began: He asks 
questions. “When you ask someone questions, you are get- 
ting them to focus on an idea,” he says. “When you pay more 
attention to something, you make more connections in the 
brain.” Rock also says that asking questions gets people to 
voice their ideas. “The best way to get people to change is to 
lay out the objective in basic terms and then ask them how 
they would go about getting there,” Rock says. 

One of the biggest mistakes that leaders, like CIOs, 
make in trying to win over the skeptical middle is assuming 
that everyone is motivated by ambition, as many CIOs are. 
Many people, especially IT professionals, are motivated as 
much or more by the work they do (e.g., the craft of software 
development) as they are by the opportunity to move up in 
the hierarchy. “There are a lot of people who don’t want to 
be king or queen,” says Michael Wakefield, senior enterprise 
associate at the Center for Creative Leadership, a consulting 


CASE STUDY QUESTIONS 


1. Although a very detailed change proposal may prevent 
people from making their own connections, as dis- 
cussed in the case, it may lead others to consider the 
proposal to be vague and unfinished. How do you bal- 
ance these two concerns? What guidelines would you 
use to ensure that you are not veering too far off in 
either direction? 


2. Kevin Sparks of Blue Cross and Blue Shield of Kansas 
City had a difficult time convincing his people of the 
need for change. What would you have suggested that 
he should do before you read the case? What about 
afterward? How did your recommendations change as 
a result? 


3. Organizational change goes beyond promotions and the 
threat of layoffs. What ways other than those discussed 
in the case would you use to entice people to embrace 
proposed changes? Provide several suggestions and jus- 
tify their rationale. 


firm. “That’s difficult for people to reveal because they fear 
their bosses will start to question their courage and commit- 
ment.” If these people don’t see an opportunity to maintain 
their allegiance to the work they love as part of a change, 
they won't see the benefit of going along. They will remain 
skeptical or, worse, move into the camp of active resisters. 

One of the best ways to bring the skeptics around is 
through learning. 

At the New York State Workers’ Compensation Board, a 
change readiness survey of employees at the beginning of an 
effort to shift compensation cases from paper folders to elec- 
tronic files found that employees’ number-one demand was 
for training. “They wanted reassurance that we weren’t go- 
ing to ask them to do something new without giving them 
the support they needed to do it,” says Nancy Mulholland, 
who is deputy executive director and CIO of the Workers’ 
Compensation Board. 

Change management is time-consuming and hard to quan- 
tify for process-oriented CIOs. Yet avoiding the challenge leads 
to failure. “Anybody can stick $2,000 in someone’s face to get 
them to finish a job, but it’s the people who can inspire others to 
follow them that are the most successful in the long run,” says 
Richard Toole, who is CIO for PharMerica, a pharmacy services 
company. “The soft stuff is important,” but inspiring others to 
change isn’t a matter of charisma or charm, say the experts. 

Sparks’s latest tactic for engaging his staff’s prefrontal cor- 
texes was to bring in an outside consultant to discuss the IT 
Infrastructure Library program and to field concerns. “We 
had an outstanding instructor, and she was able to address 
many of the questions people had,” recalls Sparks. “I could 
begin to see the lights come on in some of the skeptics. After 
a long meeting, one of my people stood up and said, ‘You 
know, we should have started working on this [automated 
monitoring] six months ago.’” 


Source: Adapted from Christopher Koch, “Change Management— 
Understanding the Science of Change,” CIO Magazine, September 15, 2006. 


REAL WORLD ACTIVITIES 


1. Search the Internet for examples of recent successful 
and failed IT implementations. What was the role of 
employee involvement and resistance in each one of 
those? What strategies did companies use to manage 
the change process, and how much success did they 
have in doing so? Prepare a report to share your find- 
ings with the class. 


2. Break into small groups to discuss what change man- 
agement strategies and tactics you would use to ensure 
a smooth transition, either at a company you are famil- 
iar with or at one you know about from previous re- 
search for this or another class. How would you achieve 
a good balance between positive and negative conse- 
quences, as well as involvement in the process? Choose 
one of your members to share your insights with the 
rest of the class. 
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FIGURE 10.18 An overview of the implementation process. Implementation activities are needed to 
transform a newly developed information system into an operational system for end users. 
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What they don’t understand is when IT overpromises and then underdelivers, 
failing to meet deadlines or not completing a project. Unless IT becomes skilled at 
PPM, we'll never close this credibility gap. 

Once you put a process in place, the other P-word—politics—will inevitably 
appear. The magic behind PPM is that, when you do it right, it becomes clear why a 
given project shouldn’t get done in the context of your overall IT governance strat- 
egy. Consider the following situation: Your portfolio management process comes up 
with a “not now” or a “no” for a business unit’s project, but the business unit (which 
has its own budget and a degree of autonomy) moves ahead without IT’s approval; 
this rogue project then creates urgent unplanned work for IT as the improperly 
planned technology spirals out of control or fails to integrate with enterprise sys- 
tems. What do you do in this case? 

TTPI’s Milne answers this question with a question: “How do you handle it when 
your corporate strategy says, ‘We’re not going into the Latin America market,’ and a 
line business does it anyway?” If your PPM process is sufficiently integrated into 
executive corporate strategy, units that are totally out of line will not need to be 
nailed by IT; the organization will rein them in, with or without IT’s participation. 


Source: Adapted from Jonathan Feldman, “Project Management Keeps IT from Being a Victim of Success,” 
InformationWeek, April 5, 2008. 


FIGURE 10.19 

An example of the 
implementation process 
activities and timelines for 
a company installing an 
intranet-based employee Train administrators 
benefits system in its human 
resource management 
department. 


Acquire and install server hardware and software 


430 © Module IV / Development Processes 


Project 
Management 


What Is a Project? 
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Project Management 


FIGURE 10.20 


The five phases of project 
management. 


Any discussion of information systems design and development would be incomplete 
without including a discussion of basic project management concepts, techniques, 
and tools. So, before we progress any further into our discussion of implementation, 
we need to understand how our project got to this point, hopefully on time and on 
budget. Although a thorough discussion of project management is far beyond the 
scope of this text, we can nonetheless look at the big picture and acquaint ourselves 
with the necessary steps in the process. It is important to note that the skills and 
knowledge necessary to be a good project manager will translate into virtually any 
project environment, and people who have acquired them are regularly sought after 
by most organizations. 


A project is a special set of activities with a clear beginning and end. Every project has 
a set of goals, objectives, and tasks. Also, every project must deal with a set of /imitations or 
constraints. Finally, though the content can vary from one project to the next, there are 
many important similarities in the process. The first, and probably the greatest, contri- 
bution of the modern project management approach is to identify the project as a series 
of steps or phases. The SDLC is a project management approach tailored toward the 
design and development of information systems. Before we return our focus to a spe- 
cific project management approach such as the SDLC, let’s look at a more generic 
picture of project management and see how it compares. No matter what the project, 
three elements will be necessary to manage it effectively and efficiently: process, tools, 
and techniques. 


The modern project management approach has identified five phases in the process. 
Figure 10.20 illustrates the five phases. 


Project Management Phase Example Activities 


Initiating/Defining State the problem(s)/goal(s). 
Identify the objectives. 


Secure resources. 


Explore costs/benefits in feasibility study. 


Planning Identify and sequence activities. 
Identify the “critical path.” 


Estimate time and resources needed for completion. 


Write a detailed project plan. 


Executing Commit resources to specific tasks. 


Add additional resources/personnel if necessary. 


Initiate project work. 


Controlling Establish reporting obligations. 
Create reporting tools. 


Compare actual progress with a baseline. 


Initiate control interventions if necessary. 


Closing Install all deliverables. 

Finalize all obligations/commitments. 
Meet with stakeholders. 

Release project resources. 


Document the project. 


Issue final report. 
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Initiating and Defining. The first phase of the project management process serves 
as a foundation for all that follows. The most important objective to achieve during 
this phase is the clear and succinct statement of the problem that the project is to solve 
or the goals that the project is to achieve. Any ambiguity at this point often spells 
doom for even the best executed projects. Also during this phase, it is necessary to 
identify and secure the resources necessary to execute the project, explore the costs 
and benefits, and identify any risks. As you have probably recognized, this is exactly 
what happens during the systems investigation phase of the SDLC. 


Planning. The next phase in the project management process involves planning the 
project. Here, every project objective and every activity associated with that objective 
must be identified and sequenced. Several tools have been created to assist in the se- 
quencing of these activities, including simple dependence diagrams, program evaluation and 
review (PERT), critical path method (CPM), and a commonly used timeline diagram 
known as a Gantt chart. All of these tools have a particular use in project management, 
but their common goal is to assist in the planning and sequencing of activities associated 
with the objectives of the project, such that nothing is left out, performed out of logical 
order, or done twice. These same tools also assist the project manager in determining 
how long each activity is going to take and thus how long the project is going to take. 
Finally, later in the project process, the tools will be used to see if the project is on sched- 
ule and, if not, where the delays occurred and what might be done to remedy the delay. 


Executing. Once all of the activities in the planning phase are complete and all de- 
tailed plans have been created and approved, the execution phase of the project can 
begin. It is here that all of the plans are put into motion. Resources, tasks, and sched- 
ules are brought together, and the necessary work teams are created and set forth on 
their assigned paths. In many respects, this is the most exciting part of the project 
management process. The phases of systems analysis and system design are the pri- 
mary phases associated with project execution in the SDLC. 


Controlling. Some project management experts suggest that controlling is simply an 
integral part of the execution phase of project management. Others suggest it must be 
viewed as a separate set of activities that, admittedly, occur simultaneous to the execu- 
tion phase. In either case, it is important to give sufficient attention to the controlling 
activities to ensure the project objectives and deadlines are met. 

Probably the single most important tool for project control is the report. Three 
common types of reports are generated to assist with project control. The variance 
report contains information related to the difference between actual and planned 
project progress. It is useful in identifying when a project is off track but provides little 
evidence as to what is causing the delay. 

The second and third types of reports are more helpful in determining the cause of 
delays and the appropriate corrections. The status report is an open-ended report that 
details the process that led to the current project state. By analyzing this report, a project 
manager can pinpoint where the delay began and create a plan to get past it and possibly 
make up for lost time. This is where the resource allocation report becomes useful. This 
report identifies the various resources (e.g., people, equipment) that are being applied to 
specific project activities and where currently unused, or slack, resources may be available. 


Closing. This last phase of the project management process focuses on bringing a 
project to a successful end. The beginning of the end of a project is the implementa- 
tion and installation of all of the project deliverables. The next step is the formal re- 
lease of the project resources so they can be redeployed into other projects or job 
roles. The final step in this phase is to review the final documentation and publish the 
final project report. Here is where the good, and bad, news concerning the project is 
documented, and the elements necessary for a postproject review are identified. 
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Evaluating 
Hardware, 
Software, and 
Services 


FIGURE 10.21 
Examples from IBM 
Corporation of the kinds 
of hardware, software, and 
IS services that many 
companies are evaluating 
and acquiring to support 
their e-commerce 
initiatives. 


Many airline pilots (and passengers, for that matter) identify the final approach 
and landing as one of the most critical elements of any flight. It is during those re- 
maining moments that even the smoothest of flights can come to an undesirable con- 
clusion. Projects are quite similar in this regard. The most beautifully planned, 
executed, and controlled project can be deemed a failure if it is poorly implemented. 
As such, we must turn our attention back to the issues of systems implementation, 
hopefully with a clearer understanding of how we arrived at this point and the process 
we will follow to do it again in another project. 


A major activity during the implementation phase of the SDLC is the acquisition of 
the hardware and software necessary to implement the new system. How do compa- 
nies evaluate and select hardware, software, and IT services, such as those shown in 
Figure 10.21? Large companies may require suppliers to present bids and proposals 
based on system specifications developed during the design stage of systems develop- 
ment. Minimum acceptable physical and performance characteristics for all hardware 
and software requirements are established. Most large business firms and all govern- 
ment agencies formalize these requirements by listing them in a document called an 
RFP (request for proposal) or RFQ (request for quotation). Then they send the RFP 
or RFQ to appropriate vendors, which use it as the basis for preparing a proposed 
purchase agreement. 

Companies may use a scoring system of evaluation when there are several competing 
proposals for a hardware or software acquisition. They give each evaluation factor a 
certain number of maximum possible points. Then they assign each competing proposal 
points for each factor, depending on how well it meets the user’s specifications. Scoring 
evaluation factors for several proposals helps organize and document the evaluation 
process. It also spotlights the strengths and weaknesses of each proposal. 

Whatever the claims of hardware manufacturers and software suppliers, the 
performance of hardware and software must be demonstrated and evaluated. Inde- 
pendent hardware and software information services (e.g., Datapro, Auerbach) may be 
used to gain detailed specification information and evaluations. Other users are fre- 
quently the best source of information needed to evaluate the claims of manufacturers 


Hardware 


Full range of offerings, including xSeries servers, iSeries midrange servers for small and 
midsize businesses, RS/6000 servers for UNIX customers and z900 mainframes for large 
enterprises. Also has full range of storage options. 


Software 


Web server. Lotus DominoGo Web server. 


Storefront. WebSphere Commerce Suite (formerly known as Net.Commerce) for storefront 
and catalog creation, relationship marketing, and order management. Can add Commerce 
Integrator to integrate with back-end systems and Catalog Architect for content management. 


Middleware/Transaction Services. WebSphere application server manages transactions. 
MQ Series queues messages and manages connections. CICS processes transactions. 


Database. DB2 Universal Database. 
Tools. WebSphere Studio includes set of predefined templates and common business logic. 


Other Applications. IBM Payment Suite for handling credit cards and managing digital 
certificates. 


Services 


IBM Global Services, which includes groups organized by each major industry, including 
retail and financial. Can design, build, and host e-commerce applications. 


Hardware Evaluation 
Factors 


FIGURE 10.22 


Asummary of 10 major 
hardware evaluation factors. 
Notice how you can use this 
to evaluate a computer 
system or a peripheral 
device. 
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and suppliers. That’s why Internet newsgroups and Weblogs established to ex- 
change information about specific software or hardware vendors and their products 
have become one of the best sources for obtaining up-to-date information about 
the experiences of users of the products. 

Large companies frequently evaluate proposed hardware and software by requiring 
the processing of special benchmark test programs and test data. Benchmarking simulates 
the processing of typical jobs on several computers and evaluates their performances. 
Users can then evaluate test results to determine which hardware device or software 
package display the best performance characteristics. 


When you evaluate the hardware needed by a new business application, you should 
investigate specific physical and performance characteristics for each computer system 
or peripheral component to be acquired. Specific questions must be answered con- 
cerning many important factors. Ten of these hardware evaluation factors and ques- 
tions are summarized in Figure 10.22. 

Notice that there is much more to evaluating hardware than determining the fastest 
and cheapest computing device. For example, the question of obsolescence must be ad- 
dressed by making a technology evaluation. The factor of ergonomics is also very im- 
portant. Ergonomic factors ensure that computer hardware and software are user 
friendly, that is, safe, comfortable, and easy to use. Connectivity is another important 
evaluation factor, because so many network technologies and bandwidth alternatives are 
available to connect computer systems to the Internet, intranet, and extranet networks. 


Hardware Evaluation Factors Rating 


Performance 
What is its speed, capacity, and throughput? 


Cost 
What is its lease or purchase price? What will be its cost of operation and 
maintenance? 


Reliability 
What are the risks of malfunction and its maintenance requirements? 
What are its error control and diagnostic features? 


Compatibility 
Is it compatible with existing hardware and software? Is it compatible with 
hardware and software provided by competing suppliers? 


Technology 
In what year of its product life cycle is it? Does it use a new untested 
technology, or does it run the risk of obsolescence? 


Ergonomics 
Has it been “human factors engineered” with the user in mind? Is it 
user-friendly, designed to be safe, comfortable, and easy to use? 


Connectivity 
Can it be easily connected to wide area and local area networks that use 
different types of network technologies and bandwidth alternatives? 


Scalability 
Can it handle the processing demands of a wide range of end users, 
transactions, queries, and other information processing requirements? 


Software 


Is system and application software available that can best use this hardware? 


Support 
Are the services required to support and maintain it available? 


Overall Rating 
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FIGURE 10.23 

A summary of selected 
software evaluation factors. 
Note that most of the 
hardware evaluation factors 
in Figure 10.22 can also be 
used to evaluate software 
packages. 


Software Evaluation 
Factors 


Evaluating IS 
Services 


Software Evaluation Factors Rating 


Quality 


Is it bug free, or does it have many errors in its program code? 


Efficiency 
Is the software a well-developed system of program code that does not use 
much CPU time, memory capacity, or disk space? 


Flexibility 


Can it handle our business processes easily, without major modification? 


Security 
Does it provide control procedures for errors, malfunctions, and improper use? 


Connectivity 
Is it Web-enabled so it can easily access the Internet, intranets, and extranets on 
its own or by working with Web browsers or other network software? 


Maintenance 
Will new features and bug fixes be easily implemented by our own software 
developers? 


Documentation 
Is the software well documented? Does it include help screens and helpful 
software agents? 


Hardware 
Does existing hardware have the features required to best use this software? 


Other Factors 

What are its performance, cost, reliability, availability, compatibility, 
modularity, technology, ergonomics, scalability, and support characteristics? 
(Use the hardware evaluation factor questions in Figure 10.22.) 


Overall Rating 


You should evaluate software according to many factors that are similar to those 
used for hardware evaluation. Thus, the factors of performance, cost, reliability, 
availability, compatibility, modularity, technology, ergonomics, and support should 
be used to evaluate proposed software acquisitions. In addition, however, the soft- 
ware evaluation factors summarized in Figure 10.23 must also be considered. 
You should answer the questions they generate to evaluate software purchases 
properly. For example, some software packages are notoriously slow, hard to use, 
bug-filled, or poorly documented. They are not a good choice, even if offered at 
attractive prices. 


Most suppliers of hardware and software products and many other firms offer a variety 
of IS services to end users and organizations. Examples include assistance in develop- 
ing a company Web site, installation or conversion of new hardware and software, 
employee training, and hardware maintenance. Some of these services are provided 
without cost by hardware manufacturers and software suppliers. 

Other types of IS services needed by a business can be outsourced to an outside 
company for a negotiated price. For example, systems integrators take over complete 
responsibility for an organization’s computer facilities when an organization out- 
sources its computer operations. They may also assume responsibility for developing 
and implementing large systems development projects that involve many vendors and 
subcontractors. Value-added resellers (VARs) specialize in providing industry-specific 
hardware, software, and services from selected manufacturers. Many other services 
are available to end users, including systems design, contract programming, and con- 
sulting services. Evaluation factors and questions for IS services are summarized in 
Figure 10.24. 


FIGURE 10.24 


Evaluation factors for IS 
services. These factors focus 
on the quality of support 
services business users may 
need. 
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Data Conversion 


Chapter 10 / Developing Business/IT Solutions @ 435 


Evaluation Factors for IS Services Rating 


Performance 
What has been their past performance in view of their past promises? 


Systems Development 
Are Web site and other e-business developers available? What are their quality 
and cost? 


Maintenance 
Is equipment maintenance provided? What are its quality and cost? 


Conversion 
What systems development and installation services will they provide during 
the conversion period? 


Training 
Is the necessary training of personnel provided? What are its quality and cost? 


Backup 
Are similar computer facilities available nearby for emergency backup purposes? 


Accessibility 

Does the vendor provide local or regional sites that offer sales, systems devel- 
opment, and hardware maintenance services? Is a customer support center at 
the vendor’s Web site available? Is a customer hotline provided? 


Business Position 
Is the vendor financially strong, with good industry market prospects? 


Hardware 
Do they provide a wide selection of compatible hardware devices and accessories? 


Software 
Do they offer a variety of useful e-business software and application packages? 


Overall Rating 


Testing, data conversion, documentation, and training are keys to successful imple- 
mentation of a new business system. 


System testing may involve testing and debugging software, testing Web site per- 
formance, and testing new hardware. An important part of testing is the review of 
prototypes of displays, reports, and other output. Prototypes should be reviewed by 
end users of the proposed systems for possible errors. Of course, testing should not 
occur only during the system’s implementation stage but throughout the system’s 
development process. For example, you might examine and critique prototypes of 
input documents, screen displays, and processing procedures during the systems design 
stage. Immediate end-user testing is one of the benefits of a prototyping process. 


Implementing new information systems for many organizations today frequently in- 
volves replacing a previous system and its software and databases. One of the most 
important implementation activities required when installing new software in such 
cases is called data conversion. For example, installing new software packages may 
require converting the data elements in databases that are affected by a new applica- 
tion into new data formats. Other data conversion activities that are typically required 
include correcting incorrect data, filtering out unwanted data, consolidating data from 
several databases, and organizing data into new data subsets, such as databases, data 
marts, and data warehouses. A good data conversion process is essential, because im- 
properly organized and formatted data are frequently reported to be one of the major 
causes of failures in implementing new systems. 
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Documentation 


During the design phase, the analysts create a data dictionary that not only de- 
scribes the various data elements contained in the new system but also specifies any 
necessary conversions from the old system. In some cases, only the name of the data 
element is changed, such as the old system field CUST_ID becomes CLIENT_ID in 
the new system. In other cases, the actual format of the data is changed, thus requiring 
some conversion application to be written to filter the old data and put them into the 
new format. An example of this might be the creation of a new CUSTOMER_ID 
format to allow for expansion or make two merged systems compatible with each 
other. This type of data element conversion requires additional time to occur, because 
each element must pass through the conversion filter before being written into the 
new data files. 

Yet another issue is the time necessary to transfer the data from the old data files 
into the files for the new system. Although it is possible that the new system may have 
been designed to use the existing data files, this is not normally the case, especially in 
situations when a new system is replacing a legacy system that is fairly old. The time 
necessary to transfer the old data can have a material impact on the conversion process 
and on the strategy that is ultimately selected. Consider the following situation. 

Suppose the conversion to the new system requires the transfer of data from 
10 different data files. The average record length across the 10 files is 1,780 bytes, and 
the total number of records contained in the 10 files is 120 million. With this informa- 
tion and an estimate of the transfer time in bytes per minute, the total transfer time can 
be easily calculated as follows: Assume a transfer rate of 10.5 megabytes per second 
(Mbps) (Fast Ethernet) with no conversion algorithm. Then, 


1,780 bytes x 120 million records = 213,600,000,000 bytes. 
213,600,000,000 bytes/10.5 Mbps = 20,343 seconds. 
20,343 seconds = 5.65 hours. 


Although the preceding calculations appear to be such that the conversion process 
does not take an inordinate amount of time, we must also be aware that they assume 
an error-free transfer, no format conversion, and 100 percent use of available network 
bandwidth. If the transfer is done using a slower communication medium, say 1.25 Mbps, 
the time jumps to 47.47 hours (just under two days). 

The important consideration here is not simply the time necessary to effect the 
transfer but the preservation of the integrity of the current system data files during the 
process. If the transfer turns out to be around 4.5 hours, then it could theoretically 
occur after business hours and be easily accomplished by the opening of the next day’s 
business. If, however, the process takes two full days, then it would need to begin at 
the close of business on Friday and would not be complete until late Sunday after- 
noon. Should any glitches show up in the process, either the transfer would have to 
wait a week to be rerun or the possibility of disrupting daily operations or losing new 
data would be very real. As you can see, careful thought about the logistics associated 
with data transfer must be given when recommending the most appropriate conver- 
sion strategy for the new system. 


Developing good user documentation is an important part of the implementation 
process. Sample data entry display screens, forms, and reports are good examples of 
documentation. When computer-aided systems engineering methods are used, documen- 
tation can be created and changed easily because it is stored and accessible on disk in a 
system repository. Documentation serves as a method of communication among the 
people responsible for developing, implementing, and maintaining a computer-based 
system. Installing and operating a newly designed system or modifying an established 
application requires a detailed record of that system’s design. Documentation is ex- 
tremely important in diagnosing errors and making changes, especially if the end users 
or systems analysts who developed a system are no longer with the organization. 
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FIGURE 10.25 How one company developed training programs for the implementation of 
an e-commerce Web site and intranet access for its employees. 


Enable e-commerce Web site access by employees with custom- e-Business Training 
ized intranet connections to customers and critical information. Required 


Install e-commerce applications on servers. 


Upgrade order-fulfillment system for e-commerce. 


Desktop applications: 
Hands-on. 


Develop a corporate intranet to support e-commerce. 


Upgrade LAN systems and hardware. Technical: 
; a Security and e-commerce. 
Internet Implement security and monitoring system. 
implementation Finalize security policy and plan. ATE 
Outsource e-commerce Web development. Internet for e-commerce. 


Training 


System Conversion 
Strategies 


Develop Internet e-commer 


Training is a vital implementation activity. IS personnel, such as user consultants, must 
be sure that end users are trained to operate a new business system, or its implementa- 
tion will fail. Training may involve only activities like data entry, or it may involve all 
aspects of the proper use of a new system. In addition, managers and end users must 
be educated in how the new technology affects the company’s business operations and 
management. This knowledge should be supplemented by training programs for any 
new hardware devices, software packages, and their use for specific work activities. 
Figure 10.25 illustrates how one business coordinated its end-user training program 
with each stage of its implementation process for developing intranet and Internet ac- 
cess within the company. 


The initial operation of a new business system can be a difficult task. It typically re- 
quires a conversion process from the use of a present system to the operation of a new 
or improved application. Conversion methods can soften the impact of introducing 
new information technologies into an organization. Four major forms of system con- 
version are illustrated in Figure 10.26. They include: 

e Parallel conversion 

e Pilot conversion 

e Phased conversion 


e Direct conversion 


Direct Conversion. The simplest conversion strategy, and probably the most disruptive 
to the organization, is the direct cutover approach. This method, sometimes referred 
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FIGURE 10.26 


‘The four major forms of 
conversion to a new system. 


Parallel 


Pilot 


= Phased 


Direct 


to as the slam dunk or cold-turkey strategy, is as abrupt as its name implies. Using 
this approach, the old system is simply turned off, and the new system is turned on in 
its place. Although this method is the least expensive of all available strategies and may 
be the only viable solution in situations in which activating the new system is an emer- 
gency or when the two systems cannot coexist under any conditions, it is also the one 
that poses the greatest risk of failure. Once the new system becomes operational, the 
end users must cope with any errors or dysfunctions, and depending on the severity of 
the problem, this approach can have a significant effect on the quality of the work 
performed. Direct conversion should be considered only in extreme circumstances, 
when no other conversion strategy is viable. 


Parallel Conversion. At the opposite end of the risk spectrum is the parallel conver- 
sion strategy. Here, the old and new systems are run simultaneously until the end us- 
ers and project coordinators are fully satisfied that the new system is functioning 
correctly and the old system is no longer necessary. Using this approach, a parallel 
conversion can be effected with either a single cutover, with a set, predetermined 
date for stopping the parallel operation, or a phased cutover, which uses some prede- 
termined method of phasing in each piece of the new system and turning off a similar 
piece of the old system. 

Although clearly having the advantage of low risk, the parallel approach also 
brings with it the highest cost. To execute a parallel approach properly, the end users 
must literally perform all daily functions with both systems, thus creating a massive 
redundancy in activities and literally double the work. In fact, unless the operational 
costs of the new system are significantly less than the old system, the cost of parallel 
operation can be as much as three to four times greater than the old system alone. 
During a parallel conversion, all outputs from both systems are compared for concur- 
rency and accuracy, until it is determined that the new system is functioning at least 
as well as the one it is replacing. Parallel conversion may be the best choice in situa- 
tions in which an automated system is replacing a manual one. In certain circum- 
stances when end users cannot cope with the often confusing redundancy of two 
systems, the parallel conversion strategy may not be viable. Also, parallel conversion 
may not be possible if the organization does not have the available computing re- 
sources to operate two systems at the same time. 


Pilot Conversion. In some situations, the new system may be installed in multiple 
locations, such as a series of bank branches or retail outlets. In other cases, the conver- 
sion may be able to be planned from a geographic perspective. When these types of 
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scenarios exist, the possibility for using a pilot conversion strategy exists. This ap- 
proach allows for the conversion to the new system, using either a direct or parallel 
method, at a single location. The advantage to this approach is that a location can be 
selected that best represents the conditions across the organization but also may be 
less risky in terms of any loss of time or delays in processing. Once the installation is 
complete at the pilot site, the process can be evaluated and any changes to the system 
made to prevent problems encountered at the pilot site from reoccurring at the re- 
maining installations. This approach may also be required if the individual sites or 
locations have certain unique characteristics or idiosyncrasies that make either a direct 
or parallel approach infeasible. 


Phased Conversion. A phased or gradual conversion strategy attempts to take ad- 
vantage of the best features of both the direct and parallel approaches while minimizing 
the risks involved. This incremental approach to conversion allows for the new system 
to be brought online as a series of functional components that are logically ordered to 
minimize disruption to end users and the flow of business. 

Phased conversion is analogous to the release of multiple versions of an applica- 
tion by a software developer. Each version of the software should correct any known 
bugs and allow for 100 percent compatibility with data entered into or processed by 
the previous version. Although having the advantage of lower risk, the phased 
approach takes the most time and thus creates the most disruption to the organiza- 
tion over time. 


When all is said and done, the single most costly activity occurs after the system im- 
plementation is complete: the postimplementation maintenance phase. The primary 
objectives associated with systems maintenance are to correct errors or faults in the 
system, provide changes to effect performance improvement, or adapt the system to 
changes in the operating or business environment. In a typical organization, more 
programmers and analysts are assigned to application maintenance activities than to 
application development. Furthermore, though a new system can take several months 
or years to design and build and cost hundreds of thousands or millions of dollars, the 
resulting system can operate around the clock and last for five to ten years, or longer. 
One major activity in postimplementation involves making changes to the system as a 
result of the users finally having an opportunity to use it. These are called change 
requests. Such requests can range from fixing a software bug not found during testing 
to designing an enhancement to an existing process or function. 


Managing and implementing change requests is only one aspect of the systems 
maintenance phase activities. In some ways, once the maintenance phase begins, the 
life cycle starts over again. New requirements are articulated, analyzed, designed, 
checked for feasibility, tested, and implemented. Although the range and nature of spe- 
cific maintenance requests vary from system to system, four basic categories of mainte- 
nance can be identified: (1) corrective, (2) adaptive, (3) perfective, and (4) preventive. 

The activities associated with corrective maintenance are focused on fixing bugs 
and logic errors not detected during the implementation testing period. Adaptive 
maintenance refers to those activities associated with modifying existing functions or 
adding new functionality to accommodate changes in the business or operating envi- 
ronments. Perfective maintenance activities involve changes made to an existing sys- 
tem that are intended to improve the performance of a function or interface. The final 
category of maintenance activities, preventive maintenance, involves those activities 
intended to reduce the chances of a system failure or extend the capacity of a current 
system’s useful life. Although often the lowest-priority maintenance activity, preven- 
tive maintenance is nonetheless a high value-adding function and vital to an organiza- 
tion’s ability to realize the full value of its investment in the system. 
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Postimplementation 
Review 


Project Success 
(or Failure): What 
We Know But 
Choose to Ignore 


£ 2 


The maintenance activity also includes a postimplementation review process to ensure 
that newly implemented systems meet the business objectives established for them. 
Errors in the development or use of a system must be corrected by the maintenance 
process. This process includes a periodic review or audit of a system to ensure that it 
is operating properly and meeting its objectives. This audit occurs in addition to con- 
tinually monitoring a new system for potential problems or necessary changes. 


There is no mystery as to why most projects succeed or fail; people have been writing 
about effective project management for millennia. 

More than 2,000 years ago, Sun Tzu described how to organize a successful, highly 
complex project (a military campaign) in The Art of War. Fred Brooks’ classic book, The 
Mythical Man-Month, offers management advice targeted at running large IT projects. 

‘The U.K. National Audit Office recently published an excellent guide to deliver- 
ing successful IT-enabled business change. Over the past 10 years, virtually every 
major IT publication has printed articles on why large projects succeed or fail. 

Despite all the excellent advice available, more than half of the major projects 
undertaken by IT departments still fail or get canceled. We know what works. We 
just don’t do it. 


e An ineffective executive sponsor. A weak or, even worse, nonexistent execu- 
tive sponsor almost guarantees business project failure. Under weak executive 
leadership, all projects become IT projects rather than business initiatives with 
IT components. 


e A poor business case. An incomplete business case allows incorrect expecta- 
tions to be set—and missed. 


e The business case is no longer valid. Marketplace changes frequently invali- 
date original business assumptions. But teams often become so invested in a 
project that they ignore warning signs and continue as planned. 


e The project is too big. Bigger projects require more discipline. 


e A lack of dedicated resources. Large projects require concentration and dedi- 
cation for the duration. But key people are frequently required to support criti- 
cal projects while continuing to perform their existing full-time jobs. 


e Out of sight, out of mind. If your suppliers fail, you fail, and you own it. Don’t 
take your eyes off them. 


e Unnecessary complexity. Projects that attempt to be all things to all people 
usually result in systems that are difficult to use, and they eventually fail. 


e Cultural conflict. Projects that violate cultural norms of the organization sel- 
dom have a chance. 

e No contingency. Stuff happens. Projects need flexibility to address the inevita- 
ble surprises. 

e Too long without deliverables. Most organizations expect visible progress in 
six to nine months. Long projects without intermediate products risk losing ex- 
ecutive interest, support, and resources. 

e Betting on a new, unproven technology. Enough said. 

e An arbitrary release date. Date-driven projects have little chance of success. 
Companies should learn to plan the project before picking a release date, not 
the other way around. 


Anything here that doesn’t make sense? That’s exactly the point. 


Source: Adapted from Bart Perkins, “12 Things You Know About Projects But Choose to Ignore,” Computerworld, 
March 12, 2007. 


FIGURE 10.27 


The 10 greatest challenges 
of developing and 
implementing intranet 
enterprise portals and 
enterprise resource 
planning systems reported 
by 100 companies. 


Implementation 
Challenges 


User 
Resistance and 
Involvement 


FIGURE 10.28 
Obstacles to knowledge 
management systems. Note 
that end-user resistance to 
knowledge sharing is the 
biggest obstacle. 
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Intranet Enterprise Portal Challenges Enterprise Resource Planning Challenges 


e Security, security, security © Getting end user buy-in 
e Defining the scope and purpose of the e Scheduling/planning 
portal e Integrating legacy systems/data 
e Finding the time and the money e Getting management buy-in 
e Ensuring consistent data quality © Dealing with multiple/international 


e Getting employees to use it sites and partners 


e Organizing the data e Changing culture/mindsets 

e Finding technical expertise e IT training 

e Integrating the pieces © Getting, keeping IT staff 

@ Making it easy to use e Moving to a new platform 

e Providing all users with access e Performance/system upgrades 


Implementing new business/IT strategies, particularly when they involve large-scale 
innovative technologies, involves major organizational change. For many organiza- 
tions, moving into e-business represents the fourth or fifth major change they have 
experienced, and endured, since the early 1980s. Successful implementation of these 
new strategies and applications requires managing the effects of changes in key or- 
ganizational dimensions such as business processes, organizational structures, mana- 
gerial roles, work assignments, and stakeholder relationships. Figure 10.27 emphasizes 
the variety and extent of the challenges reported by 100 companies that developed and 
implemented new enterprise information portals and ERP systems. 


Any new way of doing things generates some resistance from the people affected. For 
example, the implementation of new work support technologies can generate fear and 
resistance to change in employees. One of the keys to solving problems of user resis- 
tance to new information technologies is proper education and training. Even more 
important is user involvement in organizational changes and the development of new 
information systems. Organizations have a variety of strategies to help manage busi- 
ness change, and one basic requirement is the involvement and commitment of top 
management and all business stakeholders affected by the new system. 

Direct end-user participation in business planning and application development 
projects before a new system is implemented is especially important in reducing the 
potential for end-user resistance. That is why end users frequently are members of 
systems development teams or do their own development work. Such involvement 
helps ensure that end users assume ownership of a system and that its design meets 
their needs. Systems that tend to inconvenience or frustrate users cannot be effec- 
tive systems, no matter how technically elegant they are or how efficiently they 
process data. For example, Figure 10.28 illustrates some of the major obstacles to 


3% 


User resistance to sharing knowledge 


Immaturity of technology 


Immaturity of knowledge 
management industry 


E] Cost 


[P] Lack of need 
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Société de 
Transport de 
Montréal: Smooth 
Ride after a 
Bumpy Start 


Change 
Management 


knowledge management systems in business. Notice that end-user resistance to 
sharing knowledge is the biggest obstacle to the implementation of knowledge man- 
agement applications. Let’s look at a real-world example that spotlights end-user 
resistance and some of its solutions. 


Suburban sprawl might make a great business case for a transit agency, but when it 
came to servers, Canada’s Société de Transport de Montréal (STM) drew the line. 
Mike Stefanakis, senior systems engineer at STM, says that the main reason he 
started looking at virtualization technology was to prevent server sprawl. He wanted 
consolidation, particularly for development servers at the agency, which provides 
over 360 million bus and metro rides each year. 

“We crunched the numbers and realized that our growth was going to cause a 
few problems in the near future,” he says. If things kept going as they had, the 
agency would need an additional 20-30 servers each year, on top of its existing base 
of 180 primarily Wintel machines. “Too many servers were going to be needed to 
feed the needs of our users and clients,” Stefanakis says. 

But even though staffers were convinced of virtualization’s benefits pretty early 
on, the agency’s end users didn’t necessarily feel the same way. Several factors con- 
tributed to the initial resistance. For starters, there was a fear of the unknown. There 
were questions like “How stable is this new technology?” and “What do you mean I 
will be sharing my resources with other servers?” Potential users thought the new 
technology might slow them down. 

‘To help users get over their fears, Stefanakis focused on giving people the infor- 
mation they needed, while explaining the advantages of the new technology. Among 
them: great response time for business applications and baked-in disaster recovery. If 
anything does fail, restoration is just a quickly restored image away. Stefanakis and 
his staff kept “talking up” the technology and its benefits. “Virtualization came up in 
every budget, strategy and development meeting we had,” he recalls. “We made sure 
the information was conveyed to the proper people so that everyone in our depart- 
ment knew that virtualization was coming.” 

STM has been staging production servers in its virtual environment since De- 
cember 2005. 

The first virtual machine was staged in STM’s testing center as a means of quickly 
recovering a downed production server. Once the first few applications were imple- 
mented, user resistance quickly became history. “After people see the advantages, 
stability and performance available to them on a virtual platform, they tend to lose 
any inhibitions they previously may have had. The psychological barrier for virtuali- 
zation has been broken,” Stefanakis says, “and now users will ask for a new server as 
if they are ordering a coffee and danish.” 


Source: Adapted from Mary Ryan Garcia, “After Bumpy Start, Transit Agency Finds Virtualization a Smooth Ride,” 
Computerworld, March 8, 2007. 


Figure 10.29 illustrates some of the key dimensions of change management and the 
level of difficulty and business impact involved. Notice some of the people, process, 
and technology factors involved in the implementation of business/IT strategies and 
applications or other changes caused by introducing new information technologies 
into a company. Some of the technical factors listed, such as systems integrators and 
outsourcing, will be discussed in more detail in the next few chapters. For example, 
systems integrators are consulting firms or other outside contractors that may be paid 
to assume the responsibility for developing and implementing a new e-business 
application, including designing and leading its change management activities. And 
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FIGURE 10.29 Some of the key dimensions of change management. Examples of the people, process, and technology 
factors involved in managing the implementation of IT-based changes to an organization. 
Technology Process People 
e Enterprise Architecture Ownership Change Leaders 
o e Supplier Partnership Design Loose/Tight Controls 
3 e Systems Integrators Enterprisewide Processes Executive Sponsorship 
5 e Outsourcing Interenterprise Processes and Support 
n o Aligning on Conditions 
o of Satisfaction 
c 
0 
5 
m 
5 T e Technology Selection Change Control Recruitment 
8 2 e Technology Support Implementation Retention 
= 5 e Installation Management Training 
= 6 Requirements Support Processes Knowledge Transfer 


Level of Difficulty/Time to Resolve 


Source: Adapted from Grant Norris, James Hurley, Kenneth Hartley, John Dunleavy, and John Balls, E-Business and ERP: Transforming the 
Enterprise (New York, John Wiley & Sons, 2000), p. 120. Reprinted by permission. 


A Change 
Management Process 


notice that people factors have the highest level of difficulty and longest time to re- 
solve of any dimension of change management. 

‘Thus, people are a major focus of organizational change management. This focus 
includes activities such as developing innovative ways to measure, motivate, and re- 
ward performance, as well as designing programs to recruit and train employees in the 
core competencies required in a changing workplace. Change management also in- 
volves analyzing and defining all changes facing the organization and developing pro- 
grams to reduce the risks and costs and maximize the benefits of change. For example, 
implementing a new e-business application such as customer relationship manage- 
ment might involve developing a change action plan, assigning selected managers as 
change sponsors, developing employee change teams, and encouraging open communica- 
tions and feedback about organizational changes. Some key tactics change experts 
recommend include: 


e Involve as many people as possible in e-business planning and application 
development. 

e Make constant change an expected part of the culture. 

e ‘Tell everyone as much as possible about everything as often as possible, prefera- 
bly in person. 

e Make liberal use of financial incentives and recognition. 


e Work within the company culture, not around it. 


An eight-level process of change management for organizations is illustrated in 
Figure 10.30. This change management model is only one of many that could be 
applied to manage organizational changes caused by new business/IT strategies and 
applications and other changes in business processes. For example, this model suggests 
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FIGURE 10.30 A process of change management. Examples of the activities involved in successfully managing 
organizational change caused by the implementation of new business processes. 
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Source: Adapted from Martin Diese, Conrad Nowikow, Patric King, and Amy Wright, Executive’s Guide to E-Business: From Tactics to Strategy, 
p. 190. Copyright © 2000 by John Wiley & Sons Inc. Reprinted by permission. 


that the business vision created in the strategic planning phase should be commu- 
nicated in a compelling change story to the people in the organization. Evaluating 
the readiness for changes within an organization and then developing change strat- 
egies and choosing and training change leaders and champions based on that as- 
sessment could be the next steps in the process. 

These change leaders are the change agents who then are able to lead change 
teams of employees and other business stakeholders in building a business case for 
changes in technology, business processes, job content, and organizational structures. 
They also communicate the benefits of these changes and lead training programs on 
the details of new business applications. Of course, many change management mod- 
els include methods for performance measurement and rewards to provide financial 
incentives for employees and stakeholders to cooperate with changes that may be 
required. In addition, fostering a new e-business culture within an organization by 
establishing communities of interest for employees and other business stakeholders 
via Internet, intranet, and extranet discussion groups could be a valuable change 
management strategy. Such groups encourage stakeholder involvement and buy-in 
for the changes brought about by implementing new e-business applications of infor- 
mation technology. 
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e The Systems Development Cycle. Business end us- Implementation involves acquisition, testing, documen- 


ers and IS specialists may use a systems approach to 
help them develop information system solutions to 
meet business opportunities. This approach frequently 
involves a systems development cycle in which IS spe- 
cialists and end users conceive, design, and implement 
business systems. The stages, activities, and products of 
the information systems development cycle are summa- 
rized in Figure 10.3. 


Prototyping. Prototyping is a major alternative 
methodology to the traditional information systems 
development cycle. It includes the use of prototyping 
tools and methodologies, which promote an iterative, 
interactive process that develops prototypes of user 
interfaces and other information system components. 
See Figure 10.9. 


End-User Development. The application develop- 
ment capabilities built into many end-user software 
packages have made it easier for end users to develop 
their own business applications. End users should focus 
their development efforts on the system components of 
business processes that can benefit from the use of in- 


tation, training, installation, and conversion activities 
that transform a newly designed business system into an 
operational system for end users. 


Evaluating Hardware, Software, and Services. Busi- 
ness professionals should know how to evaluate the ac- 
quisition of information system resources. IT vendors’ 
proposals should be based on specifications developed 
during the design stage of systems development. A for- 
mal evaluation process reduces the possibility of incor- 
rect or unnecessary purchases of hardware or software. 
Several major evaluation factors, summarized in Fig- 
ures 10.22, 10.23, and 10.24, can be used to evaluate 
hardware, software, and IS services. 


Implementing Business Change. Implementation 
activities include managing the introduction and im- 
plementation of changes in business processes, or- 
ganizational structures, job assignments, and work 
relationships resulting from business/IT strategies and 
applications such as e-business initiatives, reengineering 
projects, supply chain alliances, and the introduction of 
new technologies. Companies use change management 


tactics such as user involvement in business/IT plan- 
ning and development to reduce end-user resistance 
and maximize acceptance of business changes by all 
stakeholders. 


formation technology, as summarized in Figure 10.14. 


e Implementing IS. The implementation process for in- 
formation system projects is summarized in Figure 10.27. 


FIGURE 10.31 Implementing New Systems 
An overview of the 
implementation process. e Acquisition 


Evaluate and acquire necessary hardware and software resources and information sys- 
tem services. Screen vendor proposals. 


Implementation activities 
are needed to transform a 
newly developed 5 
information system into an 
operational system for end 
users. 


Software Development 
Develop any software that will not be acquired externally as software packages. Make 
any necessary modifications to software packages that are acquired. 


e Data Conversion 
Convert data in company databases to new data formats and subsets required by newly 
installed software. 


e Training 
Educate and train management, end users, customers, and other business stakeholders. 
Use consultants or training programs to develop user competencies. 


e Testing 
‘Test and make necessary corrections to the programs, procedures, and hardware used 
by a new system. 


e Documentation 
Record and communicate detailed system specifications, including procedures for 
end users and IS personnel and examples of input screens and output displays and 
reports. 


e Conversion 
Convert from the use of a present system to the operation of a new or improved sys- 
tem. This conversion may involve operating both new and old systems in parallel for a 
trial period, operation of a pilot system on a trial basis at one location, phasing in the 
new system one location at a time, or a direct cutover to the new system. 
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Key Terms and Concepts 


These are the key terms and concepts of this chapter. The page number of their first explanation is in parentheses. 


1. Change management (442) 13. Legal/political feasibility (413) 26. System testing (435) 
2. Conversion (437) 14. Logical model (415) 27. Systems thinking (406) 
3. Cost/benefit analysis (412) 15. Operational feasibility (411) 28. Tangible (412) 
4. Data conversion (435) 16. Organizational analysis (414) a. Benefits (412) 
5. Documentation (436) 17. Postimplementation review (440) b. Costs (412) 
6. Economic feasibility (412) 18. Project management (430) 29. ‘Technical feasibility (412) 
7. End-user development (420) 19. Prototyping (416) 30. User interface design (418) 
8. Feasibility study (410) 20. Systems analysis and design (409) 31. User involvement (441) 
9. Functional requirements (416) 21. Systems approach (406) 32. User resistance (441) 
10. Human factors feasibility (413) 22. Systems development life 
11. Implementation process (426) cycle (409) 
12. Intangible (412) 23. Systems implementation (426) 
a. Benefits (412) 24. Systems maintenance (439) 
b. Costs (412) 25. Systems specifications (420) 


Review Quiz 


Match one of the key terms and concepts listed previously with each of the brief examples or definitions that follow. Try to 
find the best fit for answers that seem to fit more than one term or concept. Defend your choices. 


= 1, 


1. Using an organized sequence of activities to study 
a problem or opportunity using systems thinking. 


2. Trying to recognize systems and the new interrela- 


tionships and components of systems in any 
situation. 


3. Evaluating the success of a solution after it has 


been implemented. 


4. Your evaluation shows that benefits outweigh costs 


for a proposed system. 


5. The costs of acquiring computer hardware, soft- 


ware, and specialists. 


6. Loss of customer goodwill caused by errors in a 


new system. 


7. Increases in profits caused by a new system. 


8. Improved employee morale caused by efficiency 


and effectiveness of a new system. 


9. A multistep process to conceive, design, and im- 


plement an information system. 


10. A diagram or blueprint of a system that shows 


what it does without regard to how it does it. 


Determines the organizational, economic, techni- 
cal, and operational feasibility of a proposed infor- 
mation system. 


—— 12. Analyzing whether cost savings and additional 


profits will exceed the investment required. 


—_ 13. 


— 14. 


= 15. 


=— 16. 


— 17. 


— 18. 


— 19, 


— 20 


— — 2l, 
— 22. 


Reliable hardware and software are available to 
implement a proposed system. 


Determining whether any copyright or patent in- 
fringements exist as the result of a new system. 


Do we have the right people to operate the new 
system? 


Studying in detail the information needs of users 
and any information systems presently used and 
then developing a system to correct a problem or 
improve operations. 


A detailed description of user information needs 
and the input, processing, output, storage, and 
control capabilities required to meet those needs. 


Systems design should focus on developing 
user-friendly input and output methods for a 
system. 


A detailed description of the hardware, software, 
people, network, and data resources and informa- 
tion products required by a proposed system. 


. Acquiring hardware and software, testing and doc- 


umenting a proposed system, and training people 
to use it. 


Making improvements to an operational system. 


An interactive and iterative process of developing 
and refining information system prototypes. 


—— 23. Managers and business specialists can develop 


their own e-business applications. 


—— 24. Includes acquisition, testing, training, and conver- 


sion to a new system. 


—— 25. Operate in parallel with the old system, use a test 


site, switch in stages, or cut over immediately to a 
new system. 


—— 26. Checking whether hardware and software work 


properly for end users. 


—— 27. A user manual communicates the design and oper- 


ating procedures of a system. 


—— 28. Keeping an IS project on time and within its bud- 


get would be a major goal. 


___ 29. Common response to major changes in organiza- 


tional structures, roles, and stakeholder 
relationships. 


—— 30. Participation in business planning and application 


development projects before a new system is im- 
plemented is one example. 
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—— 31. Among other things, it involves analyzing and 


defining all changes facing an organization and 
developing programs to reduce risks and maximize 
benefits. 


___ 32. Transferring and converting data from old systems 


to the new one being implemented. 


—— 33. Cost and benefits that can be quantified with a 


high degree of certainty. 


—— 34. The degree to which a proposed system fits with 


the business environment and organizational 
objectives. 


—— 35. Costs and benefits of a new system that are 


hard to quantify. 


—— 36. A phase within systems analysis focused on 


understanding the organization and its 
environment. 


Discussion Questions 


. Why has prototyping become a popular way to develop 
business applications? What are prototyping’s advan- 
tages and disadvantages? 


. Refer to the Real World Case on PayPal in the chapter. 
Matthew Mengerink of PayPal notes that is not enough 
for a bank teller to speak French to feel you are in 
France, and he highlights the value customers place in 
expressions of trust and comfort, such as feeling that 
you are there. Why do you think people place value on 
these issues? How much difference would this make to 
you over and above the functionality of the Web site? 


. Review the real-world example about Wal-Mart and 
Others in the chapter. How could these companies 
prepare for the unexpected changes in demand that 
brought down their sites? Explain your reasoning. 


. What are the three most important factors you would 
use in evaluating computer hardware? Computer soft- 
ware? Explain why. 


. Assume that in your first week on a new job you are 
asked to use a type of business software that you have 
never used before. What kind of user training should 
your company provide to you before you start? 


10. 


. Refer to the Real World Case on Blue Cross and Blue 


Shield and others about organizational change in the 
chapter. What is the value of the strategy followed by 
Kevin Sparks of bringing an outsider to discuss the 
change program? Why do you think it was successful? 
Explain. 


. What is the difference among the parallel, direct, 


phased, and pilot forms of IS conversion? Which con- 
version strategy is best? Explain why. 


. Review the Google real-world example in the chapter. 


How might you change the user interface of Google’s 
search pages and those of some of its other products on 
the Web? Defend your proposals. 


. Review the real-world example discussing the factors 


involved in project failure in the chapter. If these are 
well-known, why would companies choose to ignore 
them over and over again? What could be the reasons 
behind such behavior? 


Pick a business task you would like to computerize. 
How could you use the steps of the information systems 
development cycle, as illustrated in Figure 10.3, to help 
you? Use examples to illustrate your answer. 


Analysis Exercises i 


1. SDLC in Practice 


Community Action 

The Systems Development Life Cycle (SDLC) pro- 
vides a structured problem-solving software develop- 
ment methodology. However, what works for 
information system-related problems also works for 
many business problems too. The SDLC provides a 


framework that requires adherents to follow a logical 
sequence. This sequence promotes careful analysis and 
helps ensure you are doing the right thing as well as 
doing the thing right. 

You can apply the SDLC to address many business 
problems. Think about a problem in your community. 
Your community may include your campus, your work, 


448 © Module IV / Development Processes 


or your neighborhood. Your instructor may provide 
additional guidelines. Select a problem, complete each 
step in turn, and prepare a report detailing each step. 
Due to the location-specific nature of this exercise, 
expect to conduct first-hand research and interviews. 


a. Select a problem and quantify its effects. 

b. Identify the cause or causes of the problem. 

c. Describe various solutions to this problem. Include 
estimated costs and benefits for each solution. 

d. Select a solution and prepare a plan for its imple- 
mentation. 

e. Identify the parties responsible for monitoring and 
maintaining the solution. What metrics should they 
use to monitor the results? 


. Planning for Success 

Project Planning 

Projects have many dependencies, any of which could 
become points of failure. Without the cooperation or 
input from even one vital resource, a project may fail 
to meet its objectives. Effective project planning helps 
project managers think through a project before it 
starts and prepare communication strategies in 
advance. 


a. Read the article “How to Create a Clear Project Plan,” 
Darwin Magazine, August 2004 (www.darwinmag.com/ 
read/080104/project.html), and summarize its main 
points. 

b. Read through the “SDLC in Practice” exercise and 
select a problem as directed by your professor. 

c. Prepare a project plan for the problem you selected. 

d. Present your project plan to your class. Solicit your 
peers’ suggestions for improvement. 


. Americans with Disabilities Act 

Enabling Technologies 

The Americans with Disabilities Act prohibits discrim- 
ination on the basis of disability in public accommoda- 
tions and commercial facilities. This act has been 
interpreted to include certain information systems as 
well. All information systems development projects 
should take ADA issues into consideration during de- 
velopment. Accommodating disabled employees and 
customers must never become an afterthought. 

Even if you do not presently experience physical 
limitations, you may in the future, or you may have 
employees under your supervision who require special 
tools to enable access to information systems. Research 
information systems access solutions. Be sure to include 
a detailed description of the hardware or software solu- 
tion, solution provider, and cost of accommodating 
each limitation listed next. 


a. Partial visual impairment. 
b. ‘Total visual impairment. 
c. Manual dexterity impairment. 


. Central London Congestion Charging Scheme 


Conversion Strategies 

The city of London is well-known for its many his- 
toric sites, live theater, and heavy traffic. Despite a so- 
phisticated underground subway system known locally 
as the “tube,” traffic delays, car exhaust, noise pollu- 
tion, and vehicle—pedestrian accidents have plagued 
Londoners for decades. After long deliberation, 
London’s city government adopted the Central London 
Congestion Charging Scheme. This plan involved 
establishing a toll perimeter around London’s center. 
Rather than stopping cars to collect tolls, however, 
London set up video cameras at each toll zone cross- 
ing. These cameras link to a billing system that 
charges each vehicle’s registered owner a one-day 
access toll with same-day reentrance privileges. The 
steep toll, approximately $8, discourages vehicle 
traffic into London’s city center. 

Londoners who live within the toll zone receive 
a special discount, as do residents living near the toll 
zone boundary, certain government workers, and 
businesses operating fleets of vehicles. Tolls remain 
in effect during working hours on workdays. Car 
owners have until the end of the day to pay their toll 
through e-mail, SMS messaging, telephone, Web 
site, or kiosk. 

The tolls have resulted in a significant decrease in 
automobile traffic, increased use of mass transit, fewer 
accidents, and faster driving times. The tolls have had a 
negligible effect on business operations and most resi- 
dents. They have also generated significant revenue 
that London uses to maintain the system and enhance 
public transportation. 

Consider the massive work involved in educating 
the public, marking all streets entering the toll zone, 
setting up cameras, and building the information sys- 
tems. The information systems alone must process the 
raw images, match license plates to a payment database, 
receive payments, send out nonpayment notices, and 
process appeals. Police also use the system’s databases 
for a variety of law enforcement-related work. 


a. Briefly describe the advantages and disadvantages of 
each conversion strategy (parallel, pilot, phased, and 
plunge) as they apply to the Central London Con- 
gestion Charging Scheme project. 

b. Which conversion strategy would you recommend 
for this project? 

c. Defend your recommendation in detail. 


REAL WORLD 
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Infosys Technologies: The 


Implementation Challenges of 
Knowledge Management Initiatives 


nfosys Technologies, headquartered in Bangalore, India, 

is one of the world’s largest software development con- 

tractors, with revenue of $1.6 billion in fiscal 2005 and 
employing over 50,000 software engineers and other staff in 
early 2006. The company has a long history of trying to lev- 
erage knowledge created by its employees for corporate 
advantage. Its adage “learn once, use anywhere” reinforces 
the continual learning and reflection required for knowledge 
accumulation and reuse. 

It also draws attention to a core belief that knowledge 
belongs not only to those employees who create it but to the 
entire company. 

Infosys began efforts to transform its employees’ knowl- 
edge into an organizationwide resource in the early 1990s. In 
1999, a central knowledge management (KM) group was cre- 
ated to facilitate a companywide KM program, including the 
creation of an intranet knowledge portal called KShop for 
the accumulation and reuse of organizational knowledge. 

But by early 2000, patronage of KShop by employees 
remained low. Employees within various project teams and 
practice communities continued to use their informal net- 
works to access knowledge in times of need. Local repositor- 
ies of specialized knowledge continued to proliferate within 
project teams and practice communities. In other words, 
processes at different levels of the knowledge system were 
not coupling and reinforcing one another. 

In response, during the first quarter of 2001, the KM 
group implemented a major initiative called “the knowledge 
currency unit (KCU) incentive” scheme to jump-start con- 
tributions to KShop. 

According to the scheme, Infosys employees who con- 
tributed or reviewed contributions to KShop would be 
awarded KCUs, which they could accumulate and exchange 
for monetary rewards or prizes. In addition, employees’ cu- 
mulative KCU scores would be displayed on a scoreboard on 
KShop, thereby increasing the visibility and standing of pro- 
lific contributors. 

These initiatives began yielding results, especially after 
the KCU incentive scheme was introduced. For instance, 
within a year of introduction of the KCU scheme, more than 
2,400 new knowledge assets project proposals, case studies, 
and reusable software codes were contributed to KShop, 
with nearly 20 percent of Infosys employees contributing at 
least one knowledge asset. Over 130,000 KCUs were gener- 
ated by the KM group and distributed among contributing 
and reviewing employees. 

Even as these events unfolded, the KM group began 
wondering if the KCU incentive scheme had become too 
successful. One concern had to do with employees experi- 
encing information overload and, consequently, higher 
search costs for reusable knowledge. As a member of the 
KM team commented: “Some people have told us informally 
that they are finding it faster to do things on their own or to 


ask someone they know instead of searching the repository 
for reusable content.” 

Complicating matters, the explosive growth in the 
number of contributions began placing a heavy burden on 
the limited number of volunteer reviewers. A shortage of re- 
viewers made it difficult for the KM group to ensure that 
contributions were reviewed for quality and relevance before 
being published on KShop. With review processes still strug- 
gling to keep pace with the accelerating pace of contribu- 
tions, assets of uncertain quality began appearing on KShop. 
When even contributions of questionable quality began re- 
ceiving high-quality ratings from colleagues, the rating 
scheme itself came under scrutiny. 

Concerns also began emerging about the possible im- 
pacts of the KCU scheme on knowledge processes at the 
other levels of the organization. 

One such concern was the potential for the KCU incen- 
tive scheme to destroy the spirit of community and the asking 
culture within the company. What employees would have 
given freely to one another previously was now being mone- 
tized through the KCU incentive scheme. “Why not gain 
some rewards and recognition for my knowledge contribu- 
tions, especially when others are doing so?” was the question 
being asked by employees who had shared their knowledge 
earlier for free. An additional concern was the real possibility 
that some project teams and practice groups, disappointed with 
KShop, could revert to building and relying on their own local 
repositories instead of contributing to the central portal. 

Sensing the potential of the KCU incentive scheme to 
compromise the companywide KM program, the KM group 
took several actions. First, it intervened to decouple knowl- 
edge sharing from the economic incentives that threatened 
the spirit of community and the perceived utility of KShop. 
Specifically, in April 2002, the KM group modified the KCU 
incentive scheme to emphasize recognition and personal vis- 
ibility for knowledge-sharing contributions more than mon- 
etary rewards. It formulated a new composite KCU score 
that emphasized the usefulness and benefit of contributions 
to Infosys as rated not just by volunteer reviewers or col- 
leagues but also by actual users. Moreover, to increase the 
accountability of reviewers and users who rated contribu- 
tions to KShop, the KM group began demanding tangible 
proof to justify any high ratings. 

Finally, the KM group significantly reduced the number 
of KCUs awarded for reviewing contributions to KShop and 
raised the bar for cashing in the KCU incentive points for 
monetary rewards. The KM group hoped that these steps 
would shift the motivation to share knowledge away from 
monetary rewards. 

A second set of initiatives focused on improving KM 
practices within project teams and practice communities. 

Intense time pressure in completing projects within 
stringent deadlines reduced knowledge codification efforts 
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within teams. To address this issue, the KM group modified 
forms and project templates to facilitate extraction of knowl- 
edge using automated tools. The group also implemented a 
project-tracking tool on KShop to log details and delivera- 
bles pertaining to every project within Infosys. The objec- 
tive of these initiatives was to enable the codification and 
extraction of knowledge even as teams carried out their rou- 
tine project-related tasks. 

Despite these attempts, knowledge codification contin- 
ued to vary across project teams. To address this shortcom- 
ing, the KM group introduced a hierarchy of roles to broker 
knowledge sharing among project teams, practice communi- 
ties, and the wider organization. 

Within each project team, one volunteer member would 
be designated as the KM prime. The KM prime would be 
responsible for identifying and facilitating the fulfillment of 
the team’s knowledge needs for each project. The KM prime 
would also ensure that, after the completion of each project, 
the team codified and shared critical knowledge gained dur- 
ing the project with the rest of the company. At the practice 
community and wider organizational levels, the KM group 
created the role of knowledge champions to spearhead and 
facilitate knowledge sharing and reuse in critical or emerg- 
ing technologies and methodologies. Furthermore, the KM 
group encouraged employees to swap stories on KShop with 
the view of promoting widespread sharing of tacit individual 
and team-level knowledge and experiences. 

After the modified KCU scheme was introduced, those 
who had contributed to KShop just to secure monetary re- 
wards reduced their participation. For instance, in the two 


CASE STUDY QUESTIONS 


1. Why do you think the knowledge management system 
at Infosys faced such serious implementation challenges? 
Defend your answer with examples from the case. 


2. What steps did the KM group at Infosys take to im- 
prove participation in the KM system? Why were some 
of these initiatives counterproductive? The KM group 
responded with corrective initiatives. Do you think 
these will succeed? Why or why not? 


3. What change management initiatives should the KM 
group have initiated at Infosys before attempting to 
develop and implement knowledge management at the 
company? Defend your proposals, paying particular 
attention to the final quote in the case by a longtime 
KM manager at Infosys. 


quarters immediately following the introduction of the mod- 
ified KCU scheme, the number of new contributors per 
quarter declined by nearly 37 percent, whereas the number of 
new knowledge assets contributed to KShop per quarter de- 
clined by approximately 26 percent. After this significant ini- 
tial decline, however, the number of new knowledge assets 
contributed to KShop slowly stabilized and then increased at 
a more manageable pace. Finally, users of KShop reported 
lower search costs and significant increases in the quality and 
utility of knowledge assets available through the portal. 

Looking into the future, the KM group was optimistic 
that the KM prime and knowledge champion roles in project 
groups and development communities would yield positive 
outcomes. A manager who had been associated with the KM 
initiative from the beginning reflected on the challenges 
faced in the implementation process at Infosys: 


We are coming to realize that knowledge management 
requires much more than just technology. We have to pay 
attention to the cultural and social facets of knowledge 
management as well. We have to continually campaign 
and evangelize besides investing the time and resources 
to manage the content. Knowledge management initially 
appears to be a deceptively simple task. But, make just 
one wrong move, and it is difficult to convince people to 
come back. 


Source: Adapted from Raghu Garud and Arun Kumaraswamy, “Vicious and 
Virtuous Circles in the Management of Knowledge: The Case of Infosy,” 
MIS Quarterly, March 2005; and Julie Schlosser, “Infosys U.,” Fortune, 
March 20, 2006. 


REAL WORLD ACTIVITIES 


1. Research the Internet to find examples of successful 
implementations of knowledge management systems. 
What successes do these companies claim, and what 
reasons do they give for their successful KM initiatives? 


2. If knowledge management would succeed anywhere, 
one would think it would be a smashing success at a 
progressive successful IT company like Infosys. Break 
into small groups with your classmates to discuss what 
change management and other implementation strate- 
gies and tactics you would use to ensure a successful 
KM initiative at Infosys, one of the companies you 
found in your previous Internet research, or a company 
of your choice. 
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hat managerial challenges do information systems pose for today’s 

business enterprises? The two chapters of this module emphasize 

how managers and business professionals can manage the successful 
use of information technologies in a global economy. 


e Chapter 11: Security and Ethical Challenges discusses the threats against and 
defenses needed for the performance and security of business information systems, 
as well as societal impact and ethical implications of information technology. 

e Chapter 12: Enterprise and Global Management of Information Technology 
discusses the major challenges that information technology presents to business 
managers, the components of information systems management, and the managerial 
implications of the use of information technology in global business. 
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SECURITY AND ETHICAL CHALLENGES 


Section I 

Security, Ethical, and Societal Challenges of IT 
Introduction 

Ethical Responsibility of Business Professionals 


Real World Case: Ethics, Moral Dilemmas, and Tough 
Decisions: The Many Challenges of Working in IT 


Computer Crime 

Privacy Issues 

The Current State of Cyber Law 

Other Challenges 

Health Issues 

Societal Solutions 

Section II 

Security Management of Information Technology 
Introduction 

‘Tools of Security Management 


Real World Case: Raymond James Financial, BCD Travel, 
Houston ‘Texans, and Others: Worrying about What Goes 
Out, Not What Comes In 


Internetworked Security Defenses 
Other Security Measures 
System Controls and Audits 


Real World Case: Cyber Scams: Four Top Cyber 
Criminals—Who They Are and What They Do 


1. Identify several ethical issues regarding how the 
use of information technologies in business affects 
employment, individuality, working conditions, 
privacy, crime, health, and solutions to societal 
problems. 


2. Identify several types of security management 


strategies and defenses and explain how they can 
be used to ensure the security of business applica- 
tions of information technology. 


3. Propose several ways that business managers and 
professionals can help lessen the harmful effects 
and increase the beneficial effects of the use of 
information technology. 
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SECTION | 


Introduction 


Business/IT Security, 
Ethics, and Society 


Ethical 
Responsibility 
of Business 
Professionals 


Business Ethics 


Security, Ethical, and Societal 
Challenges of IT 


There is no question that the use of information technology in business presents major 
security challenges, poses serious ethical questions, and affects society in significant 
ways. Therefore, in this section, we explore the threats to businesses and individuals as 
a result of many types of computer crime and unethical behavior. In Section II, we will 
examine a variety of methods that companies use to manage the security and integrity 
of their business systems. Now let’s look at a real-world example. 

Read the Real World Case on the next page. We can learn a lot from this case 
about the security and ethical issues that result from the pervasive use of IT in or- 
ganizations and society today. See Figure 11.1. 


The use of information technologies in business has had a major impact on society and 
thus raises ethical issues in the areas of crime, privacy, individuality, employment, 
health, and working conditions. See Figure 11.2. 

It is important to understand that information technology has had beneficial re- 
sults, as well as detrimental effects, on society and people in each of these areas. For 
example, computerizing a manufacturing process may have the beneficial result of 
improving working conditions and producing products of higher quality at lower cost, 
but it also has the adverse effect of eliminating people’s jobs. So your job as a manager 
or business professional should involve managing your work activities and those of 
others to minimize the detrimental effects of business applications of information 
technology and optimize their beneficial effects. That would represent an ethically 
responsible use of information technology. 


As a business professional, you have a responsibility to promote ethical uses of infor- 
mation technology in the workplace. Whether or not you have managerial responsi- 
bilities, you should accept the ethical responsibilities that come with your work 
activities. That includes properly performing your role as a vital human resource in the 
business systems you help develop and use in your organization. As a manager or busi- 
ness professional, it will be your responsibility to make decisions about business activi- 
ties and the use of information technologies that may have an ethical dimension that 
must be considered. 

For example, should you electronically monitor your employees’ work activities 
and e-mail? Should you let employees use their work computers for private business 
or take home copies of software for their personal use? Should you electronically ac- 
cess your employees’ personnel records or workstation files? Should you sell customer 
information extracted from transaction processing systems to other companies? These 
are a few examples of the types of decisions you will have to make that have an ethical 
dimension. So let’s take a closer look at several ethical foundations in business and 
information technology. 


Business ethics is concerned with the numerous ethical questions that managers must 
confront as part of their daily business decision making. For example, Figure 11.3 
outlines some of the basic categories of ethical issues and specific business practices 
that have serious ethical consequences. Notice that the issues of intellectual property 
rights, customer and employee privacy, security of company records, and workplace 
safety are highlighted because they have been major areas of ethical controversy in 
information technology. 

How can managers make ethical decisions when confronted with business issues 
such as those listed in Figure 11.3? Several important alternatives based on theories of 


REAL WORLD 


hat Bryan found on an executive’s computer 

six years ago still weighs heavily on his mind. 

He’s particularly troubled that the man he 
discovered using a company PC to view pornography of 
Asian women and of children was subsequently promoted 
and moved to China to run a manufacturing plant. “To this 
day, I regret not taking that stuff to the FBI.” It happened 
when Bryan, who asked that his last name not be published, 
was IT director at the U.S. division of a $500 million multi- 
national corporation based in Germany. 

The company’s Internet usage policy, which Bryan 
helped develop with input from senior management, prohib- 
ited the use of company computers to access pornographic 
or adult-content Web sites. One of Bryan’s duties was to use 
products from SurfControl PLC to monitor employee Web 
surfing and to report any violations to management. 

Bryan knew that the executive, who was a level above him in 
another department, was popular within both the U.S. division 
and the German parent. Yet when the tools turned up dozens of 
pornographic Web sites visited by the exec’s computer, Bryan 
followed the policy. “That’s what it’s there for. I wasn’t going to 
get into trouble for following the policy,” he reasoned. 

Bryan’s case is a good example of the ethical dilemmas 
that IT workers may encounter on the job. IT employees 
have privileged access to digital information, both personal 


FIGURE 11.1 


The pervasive use of information technology in 
organizations and society presents individuals with 
new ethical challenges and dilemmas. 


Source: ©Courtesy of Punchstock. 
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Ethics, Moral Dilemmas, and Tough 
Decisions: The Many Challenges of 
Working in IT 


and professional, throughout the company, and they have the 
technical prowess to manipulate that information. That gives 
them both the power and responsibility to monitor and re- 
port employees who break company rules. IT professionals 
may also uncover evidence that a coworker is, say, embez- 
zling funds, or they could be tempted to peek at private salary 
information or personal e-mails. There’s little guidance, 
however, on what to do in these uncomfortable situations. 

In the case of the porn-viewing executive, Bryan didn’t get 
into trouble, but neither did the executive, who came up with 
“a pretty outlandish explanation” that the company accepted, 
Bryan says. He considered going to the FBI, but the Internet 
bubble had just burst, and jobs were hard to come by. “It was a 
tough choice,” Bryan says. “But I had a family to feed.” 

Perhaps it would ease Bryan’s conscience to know that 
he did just what labor attorney Linn Hynds, a senior partner 
at Honigman Miller Schwartz and Cohn LLP, would have 
advised in his case. “Let the company handle it,” she says. 
“Make sure you report violations to the right person in your 
company, and show them the evidence. After that, leave it to 
the people who are supposed to be making that decision.” 
Ideally, corporate policy takes over where the law stops, gov- 
erning workplace ethics to clear up gray areas and remove 
personal judgment from the equation as much as possible. 

“If you don’t set out your policy and your guidelines, if 
you don’t make sure that people know what they are and 
understand them, you’re in no position to hold workers ac- 
countable,” says John Reece, a former CIO at the Internal 
Revenue Service and Time Warner Inc. Having clear ethical 
guidelines also lets employees off the hook emotionally if 
the person they discover breaking the policy is a friend, 
someone who reports to them directly, or a supervisor, says 
Reece, who is now head of consultancy at John C. Reece and 
Associates LLC. Organizations that have policies in place 
often focus on areas where they had trouble in the past or 
emphasize whatever they are most worried about. When 
Reece was at the IRS, for example, the biggest emphasis was 
on protecting the confidentiality of taxpayer information. 

At the U.S. Department of Defense, policies usually em- 
phasize procurement rules, notes Stephen Northcutt, presi- 
dent of the SANS Technology Institute and author of IT 
Ethics Handbook: Right and Wrong for IT Professionals. Adding 
to the complexity, an organization that depends on highly 
skilled workers might be more lenient. When Northcutt 
worked in IT security at the Naval Surface Warfare Center 
in Virginia, it was a rarefied atmosphere of highly sought- 
after PhDs. “I was told pretty clearly that if I made a whole 
lot of PhDs very unhappy so that they left, the organization 
wouldn’t need me anymore,” says Northcutt. 

Of course, that wasn’t written in any policy manual, so 
Northcutt had to read between the lines. “The way I inter- 
preted it was: Child pornography, turn that in,” he says. “But 
if the leading mathematician wants to download some pic- 
tures of naked girls, they didn’t want to hear from me.” 

Northcutt says that he did find child porn on two occasions 
and that both events led to prosecution. As for other offensive 


photos that he encountered, Northcutt pointed out to his supe- 
riors that there might be a legal liability, citing a Supreme Court 
decision that found that similar pictures at a military installation 
indicated a pervasive atmosphere of sexual harassment. That 
did the trick. “Once they saw that law was involved, they were 
more willing to change culture and policy,” Northcutt says. 

When policies aren’t clear, ethical decisions are left to the 
judgment of IT employees, which varies by person and the 
particular circumstances. For example, Gary, a director of 
technology at a nonprofit organization in the Midwest, flat- 
out refused when the assistant CEO wanted to use a mailing 
list that a new employee had stolen from her former em- 
ployer. Yet Gary, who asked that his last name not be used, 
didn’t stop his boss from installing unlicensed software on 
PCs for a short time, although he refused to do it himself. 
“The question is, how much was it really going to hurt any- 
body? We were still going to have 99.5% compliant software. 
Iwas OK with that.” He says he uninstalled it, with his boss’s 
approval, as soon as he could, which was about a week later. 

Northcutt argues that the IT profession should have two 
things that professions such as law or accounting have had 
for years: a code of ethics and standards of practice. That 
way, when company policy is nonexistent or unclear, IT pro- 
fessionals still have standards to follow. 

‘That might be useful for Tim, a systems administrator 
who works at a Fortune 500 agricultural business. When 
Tim, who asked that his last name not be published, hap- 
pened across an unencrypted spreadsheet of salary informa- 
tion on a manager’s PC, he copied it. He didn’t share the 
information with anyone or use it to his advantage. It was an 
impulsive act, he admits, that stemmed from frustration with 
his employer. “I didn’t take it for nefarious reasons; I just 
took it to prove that I could,” he says. 

‘Tim’s actions point to a disturbing trend: IT workers are 
justifying their ethically questionable behavior. That path can 
end in criminal activity, says fraud investigator Chuck Martell. 
“We started seeing a few cases about seven or eight years ago,” 
says Martell, managing director of investigative services at 
Veritas Global LLC, a security firm in Southfield, Michigan. 
“Now we're investigating a tremendous amount of them.” 


CASE STUDY QUESTIONS 


1. Companies are developing ethical policies and guidelines 
for legal reasons, but also to clarify what is acceptable 
and what is not. Do you think any of the issues raised in 
the case required clarification? Would you take exception 
to any of them being classified as inappropriate behavior? 
Why do you think these things happen anyway? 


2. In the first example (Bryan’s), it is apparent that he did not 
believe justice had been ultimately served by the decision his 
company made. Should he have taken the issue to the au- 
thorities? Or was it enough that he reported the problem 
through the proper channels and let the organization handle 
it, as was the recommendation of Linn Hynds? Provide a ra- 
tionale for the position you are willing to take on this matter. 


3. In the case, Gary chose not to stop his boss from install- 
ing unlicensed software, although he refused to do it him- 
self. If installing unlicensed software is wrong, is there any 
difference between refusing to do it versus not stopping 
somebody else? Do you buy his argument that it was not 
really going to hurt anybody? Why or why not? 


Whole Foods Market Chairman and CEO John Mackey 
spent years earning a positive reputation as a corporate leader 
who was not afraid to take a stand on ethics issues. Before other 
companies figured out that it pays to be environmentally 
friendly, Whole Foods led by setting standards for humane ani- 
mal treatment. In 2006, Mackey took the bold step of reducing 
his own annual salary to one dollar, pledging money instead for 
an emergency fund for his staff. Not shy about expressing his 
views, Mackey challenged leading thinkers, like Nobel Prize- 
winner Milton Friedman, on business ethics issues. Like many 
leaders, Mackey seemed to relish the public spotlight. 

On July 20, 2007, however, Mackey got more than he 
bargained for in terms of publicity. The Wall Street Journal 
reported that Mackey had long used the pseudonym “Ra- 
hodeb” to make postings in Yahoo Finance forums that flat- 
tered his own company and leveled criticisms against the 
competition. Serious financial and possibly legal repercus- 
sions continue to unfold from this incident, and the final 
consequences may not be known for some time. 

Amid the furor that followed this disclosure of Mackey’s 
secret online alias, it is vital that we not lose sight of the critical 
issues it raises about ethics and leadership in a rapidly evolving 
business world. There is no question that the current climate 
has prompted many more companies to tackle ethics issues. 

By now, “business ethics” is an established part of doing 
business, not just in the United States, but also increasingly 
around the world. People no longer joke that “business eth- 
ics is an oxymoron,” as society has come not merely to ex- 
pect, but to demand, that business conduct itself according 
to basic rules of ethics and integrity. Business will always 
need to pay attention to ethics and leadership, but these les- 
sons are continually challenged by new developments, in- 
cluding technological advances that promote new kinds of 
communication online. Business leaders cannot afford to 
overlook these challenges, as even a single misstep can be 
enough to undo a reputation for ethical leadership. 


Source: Adapted from Tam Harbert, “Ethics in IT: Dark Secrets, Ugly 
Truths—and Little Guidance,” Computerworld, October 29, 2007; and David 
Schmidt, “What Is the Moral Responsibility of a Business Leader?” CIO 
Magazine, September 12, 2007. 


REAL WORLD ACTIVITIES 


1. Go online to follow up on John Mackey’s story and 
search for other instances of debatable behavior where 
IT has been an important factor. Are the ones featured 
in the case exceptions, or are these occurrences becom- 
ing more and more common? How do organizations 
seem to be coping with these issues? What type of re- 
sponses did you find? Prepare a report to summarize 
your findings. 


2. The case features many examples of what is arguably 
unethical behavior, including child pornography, ac- 
cessing adult content on company-owned equipment, 
installing unlicensed software, and so on. Are some of 
these practices “more wrong” than others? Is there any 
one that you would not consider problematic? Break 
into small groups to discuss these questions and make a 
list of other ethical problems involving IT that were not 
mentioned in the case. 


FIGURE 11.2 


Important aspects of the 
security, ethical, and societal 
dimensions of the use of 
information technology in 
business. Remember that 
information technologies 
can support both beneficial 
and detrimental effects on 
society in each of the areas 
shown. 
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Employment Privacy 


Health Crime 


Working 
Conditions 


Individuality 


corporate social responsibility can be used. For example, in business ethics, the stock- 
holder theory holds that managers are agents of the stockholders, and their only ethical 
responsibility is to increase the profits of the business without violating the law or 
engaging in fraudulent practices. 

However, the social contract theory states that companies have ethical responsibili- 
ties to all members of society, which allows corporations to exist according to a social 
contract. The first condition of the contract requires companies to enhance the eco- 
nomic satisfaction of consumers and employees. They must do that without polluting 
the environment or depleting natural resources, misusing political power, or subject- 
ing their employees to dehumanizing working conditions. The second condition re- 
quires companies to avoid fraudulent practices, show respect for their employees as 
human beings, and avoid practices that systematically worsen the position of any 
group in society. 

The stakeholder theory of business ethics maintains that managers have an ethical 
responsibility to manage a firm for the benefit of all its stakeholders, that is, all indi- 
viduals and groups that have a stake in, or claim on, a company. These stakeholders 
usually include the corporation’s stockholders, employees, customers, suppliers, and 


FIGURE 11.3 Basic categories of ethical business issues. Information technology has caused ethical controversy in the 
areas of intellectual property rights, customer and employee privacy, security of company information, and workplace safety. 


Exercise of Corporate Power 


Executive salaries Corporate due process Employee conflicts Product safety 
Comparable worth Employee health of interest Environmental issues 
Product pricing screening Security of company Disinvestment 
Intellectual Customer privacy information Corporate contributions 
property rights Employee privacy Inappropriate gifts Social issues raised by 
Noncompetitive Sexual harassment Advertising content religious organizations 
agreements Affirmative action Government contract issues Plant/facility closures and 
Equal employment Financial and cash downsizing 
opportunity management procedures Political action committees 
Shareholder interests Questionable business Workplace safety 
Employment at will practices in foreign 
Whistle-blowing countries 
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FIGURE 11.4 


Ethical principles to help 
evaluate the potential harms 
or risks of the use of new 
technologies. 


Technology Ethics 


Ethical Guidelines 


Principles of Technology Ethics 


e Proportionality. The good achieved by the technology must outweigh the harm or 
risk. Moreover, there must be no alternative that achieves the same or comparable 
benefits with less harm or risk. 


e Informed Consent. Those affected by the technology should understand and accept 
the risks. 


e Justice. The benefits and burdens of the technology should be distributed fairly. Those 
who benefit should bear their fair share of the risks, and those who do not benefit 
should not suffer a significant increase in risk. 


e Minimized Risk. Even if judged acceptable by the other three guidelines, the technol- 
ogy must be implemented so as to avoid all unnecessary risk. 


the local community. Sometimes the term is broadened to include all groups who can 
affect or be affected by the corporation, such as competitors, government agencies, 
and special-interest groups. Balancing the claims of conflicting stakeholders is obvi- 
ously not an easy task for managers. 


Another important ethical dimension deals specifically with the ethics of the use of any 
form of technology. For example, Figure 11.4 outlines four principles of technology 
ethics. These principles can serve as basic ethical requirements that companies should 
meet to help ensure the ethical implementation of information technologies and 
information systems in business. 

One common example of technology ethics involves some of the health risks of 
using computer workstations for extended periods in high-volume data entry job po- 
sitions. Many organizations display ethical behavior by scheduling work breaks and 
limiting the exposure of data entry workers to staring at a computer monitor to min- 
imize their risk of developing a variety of work-related health disorders, such as hand 
or eye injuries. The health impact of information technology is discussed later in this 
chapter. 


We have outlined a few ethical principles that can serve as the basis for ethical conduct 
by managers, end users, and IS professionals. But what more specific guidelines might 
help your ethical use of information technology? Many companies and organizations 
answer that question today with detailed policies for ethical computer and Internet 
usage by their employees. For example, most policies specify that company computer 
workstations and networks are company resources that must be used only for work- 
related uses, whether using internal networks or the Internet. 

Another way to answer this question is to examine statements of responsibilities 
contained in codes of professional conduct for IS professionals. A good example is the 
code of professional conduct of the Association of Information Technology Profession- 
als (AITP), an organization of professionals in the computing field. Its code of conduct 
outlines the ethical considerations inherent in the major responsibilities of an IS pro- 
fessional. Figure 11.5 is a portion of the AITP code of conduct. 

Business and IS professionals can live up to their ethical responsibilities by volun- 
tarily following such guidelines. For example, you can be a responsible professional 
by (1) acting with integrity, (2) increasing your professional competence, (3) setting 
high standards of personal performance, (4) accepting responsibility for your work, 
and (5) advancing the health, privacy, and general welfare of the public. Then you 
would be demonstrating ethical conduct, avoiding computer crime, and increasing the 
security of any information system you develop or use. 


FIGURE 11.5 

Part of the AITP standards 
of professional conduct. 
This code can serve as a 
model for ethical conduct 
by business end users as well 
as IS professionals. 


Enron 
Corporation: 
Failure in Business 
Ethics 
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AITP Standards of Professional Conduct 
In recognition of my obligation to my employer I shall: 


e Avoid conflicts of interest and ensure that my employer is aware of any potential conflicts. 
e Protect the privacy and confidentiality of all information entrusted to me. 
e Not misrepresent or withhold information that is germane to the situation. 


e Not attempt to use the resources of my employer for personal gain or for any purpose 
without proper approval. 


e Not exploit the weakness of a computer system for personal gain or personal satisfaction. 


In recognition of my obligation to society I shall: 


e Use my skill and knowledge to inform the public in all areas of my expertise. 


e To the best of my ability, ensure that the products of my work are used in a socially 
responsible way. 


e Support, respect, and abide by the appropriate local, state, provincial, and federal laws. 


e Never misrepresent or withhold information that is germane to a problem or a situation 
of public concern, nor will I allow any such known information to remain unchallenged. 


e Notuse knowledge of a confidential or personal nature in any unauthorized manner to 
achieve personal gain. 


Source: 2007 PricewaterhouseCoopers Global Security Survey. 


Much has been said about the driven, cultlike ethos of the organization that styled 
itself “the world’s leading company.” ‘Truth be told, for all its razzle-dazzle use of 
Internet technology, a lot of the things Enron did weren’t so very exceptional: paying 
insanely large bonuses to executives, for example, often in the form of stock options 
(a practice that not only hid true compensation costs but also encouraged managers 
to keep the stock price up by any means necessary); promising outlandish growth, 
year after year, and making absurdly confident predictions about every new market it 
entered, however untested; scarcely ever admitting a weakness to the outside world; 
and showing scant interest in the questions or doubts of some in its own ranks about 
its questionable, unethical, and even illegal business and accounting practices. 

Credibility comes hard in business. You earn it slowly by conducting yourself 
with integrity year in and year out, or by showing exceptional leadership in excep- 
tional circumstances, such as on September 11, 2001. The surest way to lose it, short 
of being caught in an outright lie, is to promise much and deliver little. Those, at 
least, are two conclusions suggested by an exclusive survey of executives that Clark, 
Martire, and Bartolomeo conducted for Business 2.0. 

Executives rated Enron Chairman and CEO Ken Lay least credible of the busi- 
ness figures in the survey. Perhaps it had something to do with statements like: 


e “Our performance has never been stronger; our business model has never been 
more robust; our growth has never been more certain . . . I have never felt better 
about the prospects for the company.”—E-mail to employees, August 14, 2001 


e “The company is probably in the strongest and best shape that it has ever been 
in.”—Interview in BusinessWeek, August 24, 2001 


e “Our 26 percent increase in [profits] shows the very strong results of our core 
wholesale and retail energy businesses and our natural gas pipelines.”—Press re- 
lease, October 16, 2001 


Yet three weeks later, Enron admitted that it had overstated earnings by $586 mil- 
lion since 1997. Within a few more weeks, Enron also disclosed a stunning $638 million 
third-quarter loss and then filed for Chapter 11 bankruptcy. 
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Computer 
Crime 


FIGURE 11.6 


How large companies are 
protecting themselves from 
cyber crime. 


Dick Hudson, former CIO of Houston-based oil drilling company Global Marine 
Inc. and now president of Hudson & Associates, an executive IT consulting firm in 
Katy, Texas, thinks Enron started with a good business strategy and that if it hadn’t 
pushed the envelope, it could well have been a successful Fortune 1000 firm. Instead, 
it aimed for the Fortune 10, so it got into markets such as broadband, which is a 
tough nut to crack even for the industry’s leaders. “Those good old boys in Houston, 
they had to walk with the big dogs,” accuses Hudson. “They are a textbook case of 
greed and mismanagement.” 

On May 25, 2006, Kenneth Lay was convicted on six counts of securities and 
wire fraud and faced a total of 45 years in prison. Lay died on July 5, 2006, before 
sentencing could be passed. His protege, Jeffrey K. Skilling, was convicted of 19 of 
28 counts, and was sentenced to 24 years in prison. Andrew S. Fastow, the former 
chief financial officer, was sentenced to six years in prison for his role in the con- 
spiracy that led to the collapse of Enron. His former lieutenant, Michael Kopper, 
received a reduced sentence of 37 months for cooperating with the investigation. 


Source: Adapted from Melissa Solomon and Michael Meehan, “Enron Lesson: Tech Is for Support,” Computerworld, 
February 18, 2002. 


Cyber crime is becoming one of the Net’s growth businesses. Today, criminals are doing 
everything from stealing intellectual property and committing fraud to unleashing 
viruses and committing acts of cyberterrorism. 


Computer crime, a growing threat to society, is caused by the criminal or irrespon- 
sible actions of individuals who are taking advantage of the widespread use and vulner- 
ability of computers and the Internet and other networks. It presents a major challenge 
to the ethical use of information technologies. Computer crime also poses serious 
threats to the integrity, safety, and survival of most business systems and thus makes 
the development of effective security methods a top priority. See Figure 11.6. 

Computer crime is defined by the Association of Information Technology Profes- 
sionals (AITP) as including (1) the unauthorized use, access, modification, and de- 
struction of hardware, software, data, or network resources; (2) the unauthorized 
release of information; (3) the unauthorized copying of software; (4) denying an end 
user access to his or her own hardware, software, data, or network resources; and (5) 
using or conspiring to use computer or network resources to obtain information or 
tangible property illegally. This definition was promoted by the AITP in a Model 
Computer Crime Act and is reflected in many computer crime laws. 


Antivirus 99% = Security is about 6 to 8% of the IT 
i | budget in developed countries. 
Virtual private networks 91% = 74% currently have or plan to 


kk | establish in the next two years the 


ihtrusion-detection systems 88% position of chief security officer or 


B chief information security officer. 


Data backup 82% = 40% have a chief privacy officer, 


—_ and another 6% intend to appoint 
Cio ee Satan a 0 us 3 5 t ) y 


Source: 2007 PricewaterhouseCoopers Global Security Survey. 
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Phishing 


Hacking and 
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Until just a few years ago, Gary Warner did not have the kind of day job you’d expect 
from an antiphishing crusader. He didn’t work for a security vendor or a bank, or any 
kind of company you’d expect to care about phishing. Warner’s career as a cyber- 
sleuth began on Halloween 2000. That’s when his company’s Web site was defaced 
by an entity named Pimpshiz as part of a pro-Napster Internet graffiti campaign. 

“My boss came to me and said, ‘Find out who did this and put them in jail,” said 
Warner, who was at the time an IT staffer with Energen, a Birmingham, Alabama oil 
and gas company. It was an eye-opening experience. “I called the police and they 
were like, “What do you want us to do?” he said. Months later, when Pimpshiz 
struck servers at NASA, Warner reached out, calling staff there and saying “Hey, we 
know who this guy is. Here’s his name and address.” 

Since then, Warner has quietly become one of the most-respected authorities on 
phishing in the United States—the kind of guy that federal agents and banking IT 
staff call when they want to know how to catch the bad guys and shut down their 
credit-card-stealing Web sites. 

With Warner’s help, authorities eventually arrested Pimpshiz, whose real name is 
Robert Lyttle, in connection with the defacements. 

Warner said that the Pimpshiz case was formative, underlining how hard it is for law 
enforcement to catch the bad guys on the Internet. “The experience showed me that it’s 
not that they don’t care,” Warner said. “Their hands are tied by the legal process.” 

In July of 2007, with recommendations from FBI and Secret Service agents, 
Warner took a job as Director of Research in Computer Forensics with the Univer- 
sity of Alabama at Birmingham (UAB). He also began working with law enforcement, 
not only educating FBI and Secret Service agents on how crimes were committed, but 
also helping to track down the criminals and helping with take-downs. 

For Warner, the work isn’t so much a job, as it is his moral responsibility as a com- 
puter scientist. “One of the things that really bothered me from the very beginning was 
people who were using my field to attack other people,” he said. “The way I see it, this 
is our Internet. I’m going to stand at the end of my driveway and protect what’s mine.” 

Warner is now focusing on fighting cyber-crime full-time and on training a new 
generation of network forensics investigators. 

“You wouldn’t believe the looks on their eyes the first time they got an e-mail 
back from a Webmaster saying, “Thanks for letting me know. I just shut that down.” 
Five days after final exams at the University of Alabama at Birmingham and though 
it would have no effect on their marks, four students were still coming into the labs 
to help shut down phishers. 

“That idea that as a private citizen, you can help, that’s the kind of thing we’re 
trying to inspire,” he says. 


Source: Adapted from Robert McMillan, “Crime and Punishment: The White Knight of Phish-Busting,” Computer- 
world, December 31, 2007. 


Cyber thieves have at their fingertips a dozen dangerous tools, from “scans” that ferret 
out weaknesses in Web site software programs to “sniffers” that snatch passwords. 


Hacking, in computerese, is the obsessive use of computers or the unauthorized access 
and use of networked computer systems. Hackers can be outsiders or company employ- 
ees who use the Internet and other networks to steal or damage data and programs. One 
of the issues in hacking is what to do about a hacker who commits only electronic breaking 
and entering, that is, gets access to a computer system and reads some files but neither 
steals nor damages anything. This situation is common in computer crime cases that are 
prosecuted. In most cases, courts have found that the typical computer crime statute lan- 
guage prohibiting malicious access to a computer system did apply to anyone gaining 
unauthorized access to another’s computer networks. See Figure 11.7. 
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Common Hacking Tactics 


FIGURE 11.7 


Examples of common 
hacking tactics to assault 
companies through the 
Internet and other 
networks. 


Denial of Service. This is 
becoming a common net- 
working prank. By hammer- 
ing a Web site’s equipment 
with too many requests for 
information, an attacker can 
effectively clog the system, 
slowing performance or 
even crashing the site. This 
method of overloading com- 
puters is sometimes used to 
cover up an attack. 


Scans. Widespread probes 
of the Internet to determine 
types of computers, services, 
and connections. That way 
the bad guys can take advan- 
tage of weaknesses in a par- 
ticular make of computer or 
software program. 


Sniffer. Programs that 
covertly search individual 
packets of data as they pass 
through the Internet, cap- 
turing passwords or the 
entire contents. 


Spoofing. Faking an e-mail 
address or Web page to 


trick users into passing 
along critical information 
like passwords or credit 
card numbers. 


Trojan Horse. A program 
that, unknown to the user, 
contains instructions that 
exploit a known vulnerabil- 
ity in some software. 


Logic Bombs. An instruc- 
tion in a computer program 
that triggers a malicious act. 


Buffer Overflow. A tech- 
nique for crashing or gain- 
ing control of a computer 
by sending too much data 
to the buffer in a computer’s 
memoty. 


Back Doors. In case the 
original entry point has been 
detected, having a few hid- 
den ways back makes reentry 
easy—and difficult to detect. 


Malicious Applets. ‘Tiny 
programs, sometimes writ- 
ten in the popular Java com- 
puter language, that misuse 
your computer’s resources, 
modify files on the hard 
disk, send fake e-mail, or 
steal passwords. 


War Dialing. Programs 
that automatically dial thou- 
sands of telephone numbers 
in search of a way in through 
a modem connection. 


Password Crackers. 
Software that can guess 
passwords. 


Social Engineering. A 
tactic used to gain access to 
computer systems by talking 
unsuspecting company em- 
ployees out of valuable 
information such as 
passwords. 


Dumpster Diving. Sifting 
through a company’s gar- 
bage to find information to 
help break into their com- 
puters. Sometimes the in- 
formation is used to make a 
stab at social engineering 
more credible. 


Hackers can monitor e-mail, Web server access, or file transfers to extract passwords, 
steal network files, or plant data that will cause a system to welcome intruders. A hacker 
may also use remote services that allow one computer on a network to execute programs 
on another computer to gain privileged access within a network. ‘Telnet, an Internet tool 
for interactive use of remote computers, can help hackers discover information to plan 
other attacks. Hackers have used Telnet to access a computer’s e-mail port, for example, 
to monitor e-mail messages for passwords and other information about privileged user 
accounts and network resources. ‘These are just some of the typical types of computer 
crimes that hackers commit on the Internet on a regular basis. That’s why Internet secu- 
rity measures like encryption and firewalls, as discussed in the next section, are so vital to 
the success of e-commerce and other e-business applications. 

The hacking community is quick to make the distinction between hacking and 
cracking. A cracker (also called a black hat or darkside hacker) is a malicious or crimi- 
nal hacker. This term is seldom used outside of the security industry and by some 
modern programmers. The general public uses the term hacker to refer to the same 
thing. In computer jargon, the meaning of hacker can be much more broad. The name 
comes from the opposite of white hat hackers. 

Usually a cracker is a person who maintains knowledge of the vulnerabilities he or 
she finds and exploits them for private advantage, not revealing them to either the 
general public or the manufacturer for correction. Many crackers promote individual 
freedom and accessibility over privacy and security. Crackers may seek to expand holes 
in systems; any attempts made to patch software are generally to prevent others from 
also compromising a system over which they have already obtained secure control. In 
the most extreme cases, a cracker may work to cause damage maliciously or make 
threats to do so for blackmail purposes. 


Cyber Theft 


Cyberterrorism 
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The term cracker was coined by Richard Stallman to provide an alternative to abus- 
ing the existing word hacker for this meaning. This term’s use is limited (as is “black 
hat”) mostly to some areas of the computer and security field and, even there, is con- 
sidered controversial. One group that refers to themselves as hackers consists of skilled 
computer enthusiasts. The other, and more common usage, refers to people who at- 
tempt to gain unauthorized access to computer systems. Many members of the first 
group attempt to convince people that intruders should be called crackers rather than 
hackers, but the common usage remains ingrained. 


Many computer crimes involve the theft of money. In the majority of cases, they are 
inside jobs that involve unauthorized network entry and fraudulent alteration of 
computer databases to cover the tracks of the employees involved. Of course, many 
computer crimes involve the use of the Internet. One early example was the theft of 
$11 million from Citibank in late 1994. Russian hacker Vladimir Levin and his ac- 
complices in St. Petersburg used the Internet for an electronic break-in of Citibank’s 
mainframe systems in New York. They then succeeded in transferring the funds 
from several Citibank accounts to their own accounts at banks in Finland, Israel, and 
California. 

In most cases, the scope of such financial losses is much larger than the incidents 
reported. Companies don’t usually reveal that they have been targets or victims of 
computer crime. They fear scaring customers and provoking complaints by share- 
holders. In fact, several British banks, including the Bank of London, paid hackers 
more than a half million dollars not to reveal information about electronic break-ins. 


Cyberterrorism is the leveraging of an organization’s or government’s computers and 
information, particularly via the Internet, to cause physical, real-world harm or severe 
disruption of infrastructure. There are some that argue cyberterrorism is really a form 
of hacking or information warfare. They disagree with labeling it terrorism because of 
the unlikelihood of the creation of fear, significant physical harm, or death in a popula- 
tion using electronic means, considering current attack and protective technologies. 

The National Conference of State Legislatures (NCSL) puts a much finer point 
on the definition of the term: 


the use of information technology by terrorist groups and individuals to further their 
agenda. This can include use of information technology to organize and execute attacks 
against networks, computer systems and telecommunications infrastructures, or for 
exchanging information or making threats electronically. 


Cyberterrorism can have a serious large-scale influence on significant numbers of 
people. It can significantly weaken a country’s economy, thereby denying it access to vital 
resources and making it more vulnerable to military attack. Cyberterror can also affect 
Internet-based businesses. Like bricks and mortar retailers and service providers, most 
Web sites that produce income (whether by advertising, monetary exchange for goods, or 
paid services) could stand to lose money in the event of downtime created by cyber crim- 
inals. As Internet-businesses have increasing economic importance to countries, what is 
normally cyber crime becomes more political and therefore “terror” related. 

‘To date, there have been no reported cyber attacks on the United States. There 
have, however, been several large-scale examples of cyberterrorism in other countries. 
One such example occurred in Romania when cyberterrorists illegally gained access to 
the computers controlling the life-support systems at an Antarctic research station, 
endangering the 58 scientists involved. However, the culprits were stopped before 
damage actually occurred. Mostly nonpolitical acts of sabotage have caused financial 
and other damage, as in a case where a disgruntled employee caused the release of 
untreated sewage into water in Maroochy Shire, Australia. Computer viruses have 
degraded or shut down some nonessential systems in nuclear power plants, but this is 
not believed to have been a deliberate attack. 
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Leaving Your Job? 
Don’t Take 
Anything with You 


More recently, in May 2007 Estonia was subjected to a mass cyber attack in the 
wake of the removal of a Russian World War II war memorial from downtown Talinn. 
The attack was a distributed denial of service attack in which selected sites were bom- 
barded with traffic in order to force them off-line; nearly all Estonian government 
ministry networks as well as two major Estonian bank networks were knocked off-line; 
in addition, the political party Web site of Estonia’s current Prime Minister Andrus 
Ansip featured a counterfeit letter of apology from Ansip for removing the memo- 
rial statue. Despite speculation that the attack had been coordinated by the Russian 
government, Estonia’s defense minister admitted he had no evidence linking cyber 
attacks to Russian authorities. Russia called accusations of its involvement “unfounded,” 
and neither NATO nor European Commission experts were able to find any proof 
of official Russian government participation. In January 2008 a man from Estonia 
was convicted for launching the attacks against the Estonian Reform Party Web site 
and fined. 


Employees who sign a noncompete agreement when hired, then break the agree- 
ment by leaving to work for a competitor, might want to exercise a little extra cau- 
tion. Ex-employers might be able to use the Computer Fraud and Abuse Act to 
prosecute those suspected of stealing company intellectual property. The Act, de- 
signed to protect government computers and punish hackers, has been amended and 
now applies to any computer connected to the Internet, says Gregory Trimarche, a 
partner at the influential law and lobbying firm Greenberg ‘Traurig. 

Sensitive data can range from detailed customer and employee contact lists to inter- 
nal marketing material. Trimarche considers intellectual property and trade secrets to 
be information that derives “independent economic value” that’s not “generally known 
or available to the general public or competitors.” An employee’s know-how or talent 
doesn’t fall into this category, but the company phone list with extensions could. 

It’s Sergio Kopelev’s job to collect the evidence. Kopelev, a computer forensic 
specialist at LECG, which provides independent testimony, analysis, and consulting 
services to resolve disputes, said, “70 percent of people have stolen key information 
from work.” By looking at the metadata, employers can determine when a document 
was printed. “You can secure the file’s metadata by right-clicking on files running 
Microsoft Windows within the properties, for example,” he says. “You also can tell 
when documents are copied to a thumb or flash drive. When you look at the drive 
forensically, the fact that someone has copied documents to a thumb drive is seen.” 

There is operating system metadata, software-dependent metadata, some col- 
lected by the machine and others by the user. “The most pilfered items include 
e-mail, address books and contact lists and customer databases,” notes Kopelev. 

Aside from taking the ex-employee to court, what’s the recourse for companies 
that have executives who leave to work at a competitor? Vengeful employers can start 
yanking back stock options. John Giovannone, corporate attorney and partner at 
Greenberg ‘Traurig, said there’s a growing trend to include a “claw-back provision” 
giving employers the right to terminate stock options under certain circumstances, 
or make the employee pay back the difference between the exercised option price 
and fair-market stock price. 

Lawyers at Greenberg Traurig “routinely” include the Computer Fraud and 
Abuse Act in lawsuits brought against ex-employees who jump ship to a competitor, 
says Irimarche. In the past several years, he’s used the statute a handful of times. “It’s 
a new tool and just now coming into common use. When you have a new statute that 
gives you a powerful tool, it takes time for the legal community, including judges, to 
get comfortable with it.” 


Source: Adapted from Laurie Sullivan, “Companies Urged to Prosecute Ex-Employees for Bringing Info to Competitors,” 
InformationWeek, May 29, 2006. 


Unauthorized Use at 


Work 


FIGURE 11.8 


Internet abuses in the 
workplace. 
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The unauthorized use of computer systems and networks can be called time and re- 
source theft. A common example is unauthorized use of company-owned computer net- 
works by employees. This use may range from doing private consulting or personal 
finances to playing video games to unauthorized use of the Internet on company net- 
works. Network monitoring software, called sniffers, is frequently used to monitor 
network traffic to evaluate network capacity, as well as to reveal evidence of improper 
use. See Figure 11.8. 

According to one survey, 90 percent of U.S. workers admit to surfing recreational 
sites during office hours, and 84 percent say they send personal e-mail from work. So 
this kind of activity alone may not get you fired from your job; however, other Inter- 
net activities at work can bring instant dismissal. For example, The New York Times 
fired 23 workers because they were distributing racist and sexually offensive jokes on 
the company’s e-mail system. 

Xerox Corp. fired more than 40 workers for spending up to eight hours a day on 
pornography sites on the Web. Several employees even downloaded pornographic 
videos, which took so much network bandwidth that it choked the company network 
and prevented coworkers from sending or receiving e-mail. Xerox instituted an eight- 
member SWAT team on computer abuse that uses software to review every Web site 
its 40,000 computer users view each day. Other companies clamp down even harder by 
installing software like SurfWatch, which enables them to block and monitor access to 
off-limit Web sites. 


Internet Abuses Activity 


General E-mail Include spamming, harassments, chain letters, solicitations, spoof- 


Abuses ing, propagations of viruses/worms, and defamatory statements. 
Unauthorized Sharing of passwords and access into networks without permission. 
Usage and Access 

Copyright Using illegal or pirated software that costs organizations millions of 
Infringement/ dollars because of copyright infringements. Copying of Web sites 
Plagiarism and copyrighted logos. 

Newsgroup Posting of messages on various non-work-related topics from sex 
Postings to lawn care advice. 


‘Transmission of 
Confidential Data 


Using the Internet to display or transmit trade secrets. 


Pornography Accessing sexually explicit sites from workplace as well as the 
display, distribution, and surfing of these offensive sites. 
Hacking Hacking of Web sites, ranging from denial of service attacks to 


accessing organizational databases. 


Non-Work-Related Propagation of software that ties up office bandwidth. Use of 
Download/Upload programs that allow the transmission of movies, music, and 
graphical materials. 


Leisure Use of Loafing around the Internet, which includes shopping, sending 


the Internet e-cards and personal e-mail, gambling online, chatting, game play- 
ing, auctioning, stock trading, and doing other personal activities. 

Usage of Using an external ISP to connect to the Internet to avoid detection. 

External ISPs 

Moonlighting Using office resources such as networks and computers to organize 


and conduct personal business (side jobs). 


Source: Adapted from Keng Siau, Fiona Fui-Hoon Nah, and Limei Teng, “Acceptable Internet Use 
Policy,” Communications of the ACM, January 2002, p. 76. 
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Internet Abuse 
Can Get You Fired 


Software Piracy 


Think you can get away with using e-mail and the Internet in violation of company 
policy? Think again. A new survey found that more than one-quarter of employers have 
fired workers for misusing e-mail, and one-third have fired workers for misusing the 
Internet on the job. The study, conducted by the American Management Association 
and the ePolicy Institute, surveyed 304 U.S. companies of all sizes. 

The vast majority of bosses who fired workers for Internet misuse, 84 percent, said 
the employee was accessing porn or other inappropriate content. Although it is obvi- 
ously wrong to look at inappropriate content on company time, a surprising number of 
people were fired just for surfing the Web. As many as 34 percent of managers in the 
study said they let go of workers for excessive personal use of the Internet, according to 
the survey. 

Among managers who fired workers for e-mail misuse, 64 percent did so because 
the employee violated company policy and 62 percent said the workers’ e-mail con- 
tained inappropriate or offensive language. More than a quarter of bosses said they 
fired workers for excessive personal use of e-mail, and 22 percent said their workers 
were fired for breaching confidentiality rules in e-mail. 

Companies are worried about the inappropriate use of the Internet, and so 
66 percent of those in the study said they monitor Internet connections. As many as 
65 percent of them use software to block inappropriate Web sites. Eighteen percent 
of the companies block URLs (uniform resource locators) to prevent workers from 
visiting external blogs. 

Companies use different methods to monitor workers’ computers, with 45 per- 
cent of those participating in the survey tracking content, keystrokes, and time spent 
at the keyboard. An additional 43 percent store and review computer files. Twelve 
percent monitor blogs to track content about the company, and 10 percent monitor 
social-networking sites. 

The researchers found that even though only two states require companies to 
notify their workers that they’re monitoring them, most tell employees of their mon- 
itoring activities. Of the companies that monitor workers in the survey, 83 percent 
said they tell employees that they are monitoring content, keystrokes, and time spent 
at the keyboard. As many as 84 percent tell employees that they review computer 
activity, and 71 percent alert workers that they monitor their e-mails. 


Source: Adapted from Nancy Gohring, “Over 50% of Companies Fire Workers for E-Mail, ‘Net Abuse,” CIO Magazine, 
February 28, 2008. 


Computer programs are valuable property and thus the subject of theft from computer 
systems. However, unauthorized copying of software, or software piracy, is also a ma- 
jor form of software theft. Software piracy by company employees is widespread, which 
has resulted in lawsuits by the Software Publishers Association, an industry association 
of software developers, against major corporations that allowed unauthorized copying 
of their programs. 

Unauthorized copying is illegal because software is intellectual property that is 
protected by copyright law and user licensing agreements. For example, in the United 
States, commercial software packages are protected by the Computer Software Piracy 
and Counterfeiting Amendment to the Federal Copyright Act. In most cases, the pur- 
chase of a commercial software package is really a payment to license its fair use by an 
individual end user. Therefore, many companies sign site licenses that legally allow them 
to make a certain number of copies for use by their employees at a particular location. 
Other alternatives are shareware, which allows you to make copies of software for oth- 
ers, and public domain software, which is not copyrighted. 

The most recent study by the Business Software Alliance, an antipiracy group 
whose members include Apple Computer, IBM, Intel, and Microsoft, shows that in 
2007, pirated software accounts for 38 percent of software in use worldwide. Reported 


Theft of Intellectual 
Property 


Music Piracy: 
The Long War 
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losses from software piracy in 2007 were almost $48 billion—up $8 billion from the 
year before. “That’s over a third of the industry’s revenue,” says Bob Kruger, the 
group’s vice president for enforcement. According to the findings, only $50 billion of 
the $100 billion in software purchased in 2007 was legally acquired. In other words, 
for every dollar spent on software purchased legitimately worldwide, there was 50 
cents’ worth of software that was obtained illegally. 


Software is not the only property that is subject to computer-based piracy. Other 
intellectual property theft occurs in the form of infringements of copyrighted mate- 
rial, such as music, videos, images, articles, books, and other written works, which 
most courts have deemed illegal. Digitized versions can easily be captured by compu- 
ter systems and made available for people to access or download at Internet Web sites 
or can be readily disseminated by e-mail as file attachments. The development of 
peer-to-peer (P2P) networking technologies (discussed in Chapter 6) has made digital 
versions of copyrighted material even more vulnerable to unauthorized use. For exam- 
ple, P2P file-sharing software enables direct MP3 audio file transfers of specified 
tracks of music between your PC and those of other users on the Internet. Thus, such 
software creates a peer-to-peer network of millions of Internet users who electronically 
trade digital versions of copyrighted or public domain music stored on their PC’s hard 
drives. More recently, music publishers and manufacturers are offering legal, and rela- 
tively inexpensive, methods to access online music in a variety of formats. Because of 
this proactive posture, the music industry reports that illegal downloading of music 
and video properties is down and continuing to drop significantly. Let’s look at the 
ongoing debate in this controversial area more closely with a real-world example that 
emphasizes the threat of developments in IT to intellectual property rights. 


“Canadian pirates” is what the music dealers call publishing houses across the line who 
are flooding this country, they say, with spurious editions of the latest copyrighted popular 
songs. They use the mails [sic] to reach purchasers, so members of the American Music 
Publishers’ Association assert, and as a result the legitimate music publishing business of 
the United States has fallen off 50 percent in the past twelve months. Their investigation 
has revealed that all of the most popular pieces have been counterfeited, despite the fact 
that they are copyrighted, and by unknown publishers are sold at from 2 cents to 5 cents 
per copy, though the original compositions sell at from 20 to 40 cents per copy. 


Sounds somewhat familiar? You may be a little too young to remember, but it was 
published in The New York Times sometime ago—June 13, 1897 to be exact. As you 
can see, music piracy is hardly a recent phenomenon. It has, however, reached stag- 
gering proportions in the last two decades or so, from Napster to torrents, and in- 
cluding the less sophisticated but widely available CD burners. 

However, only a few years after Napster’s launch, online song-swapping took a big 
hit from a dogged legal campaign by the Recording Industry Association of America 
(RIAA) to shut down the top services, Napster and Audiogalaxy. Others—like Kazaa 
and Morpheus—went on the run, as their users were being sued by the RIAA. 

Other networks, like Gnutella, had been built to withstand legal assault. By 
avoiding centralized servers and spreading the goods around the globe, the free-music 
hackers hoped their networks would be impossible to shut down. Too bad they also 
became impossible to use. Shawn Fanning (the creator of Napster) had a hit because 
Napster provided quick and easy access to a huge trove of music. His deservedly 
nameless imitators required far more work to find far fewer tunes. 

At times, the attention moved to the pirating and copying of physical CDs. Look 
at the numbers: Industry estimates say that more than 6 billion blank CDs were sold 
worldwide in 2003—that’s one for every person alive today—along with 44 million 
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drives on which to burn them. By 2004, worldwide sales of CD-Audio, CD-ROM, 
and CD-R all together surpassed 30 billion units. In addition, millions of people now 
own writable drives—far more than the most optimistic membership claims made by 
Napster or any of its heirs. “You'll find one on nearly every consumer PC,” cites 
Gartner analyst Mary Craig, one of the more bearish forecasters in the business. 
“They’re not using them for backups.” 

‘Today, peer-to-peer (P2P) torrent clients have spread broadly. LimeWire, a griz- 
zled veteran of the peer-to-peer (P2P) file-sharing scene, remains the most popular 
software for exchanging music, video, and software—much of it pirated—through 
the Internet, with pTorrent a not-too-close second. LimeWire was used on 17.8% of 
PCs in September of 2007, according to a Digital Media Desktop Report. Since 
about half of surveyed PCs have at least one peer-to-peer sharing application in- 
stalled, that gives LimeWire a 36.4% share—more than three times the 11.3% share 
of the next-most-popular client, pTorrent. 


Source: Adapted from Paul Boutin, “Burn Baby Burn,” Wired, December 2002; and Eric Lai, “Study: LimeWire 
Remains Top P2P Software; pTorrent Fast-Rising No. 2,” Computerworld, April 17, 2008. 


One of the most destructive examples of computer crime involves the creation of a 
computer virus or worm. Virus is the more popular term, but technically, a virus is a 
program code that cannot work without being inserted into another program. A worm 
is a distinct program that can run unaided. In either case, these programs copy annoy- 
ing or destructive routines into the networked computer systems of anyone who ac- 
cesses computers infected with the virus or who uses copies of magnetic disks taken 
from infected computers. Thus, a computer virus or worm can spread destruction 
among many users. Although they sometimes display only humorous messages, they 
more often destroy the contents of memory, hard disks, and other storage devices. See 
Figure 11.9. 

Computer viruses typically enter a computer system through e-mail and file 
attachments via the Internet and online services or through illegal or borrowed 
copies of software. Copies of shareware software downloaded from the Internet can be 
another source of viruses. A virus usually copies itself into the files of a computer’s 
operating system. Then the virus spreads to the main memory and copies itself onto 
the computer’s hard disk and any inserted floppy disks. The virus spreads to other 
computers through e-mail, file transfers, other telecommunications activities, or 
floppy disks from infected computers. Thus, as a good practice, you should avoid 
using software from questionable sources without checking for viruses. You should 
also regularly use antivirus programs that can help diagnose and remove computer 
viruses from infected files on your hard disk. We will discuss defense against viruses 
further in Section II. 


Worried about the virulent Storm worm that has been buffeting the Internet with 
mass mailings? Symantec Corp. researchers said that the “Storm Trojan,” aka 
“Peacomm,” is now spreading via AOL Instant Messenger (AIM), Google Talk, and 
Yahoo Messenger. 

An alert to some Symantec customers pegged the new infection vector as 
“insidious” because the message—such as the cryptic “LOL;)”—and the included 
URL can be dynamically updated by the attacker. Even worse, according to Alfred 
Huger, senior director of Symantec’s security response team, “it injects a message 
and URL only into already open windows. It’s not just some random message that 


(text continues on page 470) 
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FIGURE 11.9 The top five virus families of all time. Note that three of the five occurred during 2004. 


Top Five Virus Families of All Time 


MyDoom First Discovered: 1/26/2004 
e Spreads both by e-mail and over the Kazaa file-sharing network. It appears to install some form of backdoor compo- 
nent on compromised machines, as well as effecting a denial of service attack on the SCO Group’s Web site. 


e The e-mail poses either as a returned message, or as a Unicode message that can’t be rendered properly, and urges the 
target to click on the attachment to see the message. 


e This worm also has a backdoor component, which opens up two TCP ports—that stay open even after the worm’s ter- 
mination date (February 12, 2004). 


e Upon executing the virus, a copy of Notepad is opened, filled with lots of nonsense characters. 


Netsky First Discovered: 3/3/2004 


e A mass-mailing worm that spreads by e-mailing itself to all e-mail addresses found in files on all local and mapped 
network drives. 

e Ttalso tries to spread via peer-to-peer file-sharing applications by copying itself into the shared folder used by the file- 
sharing applications (it searches for folders whose name contains the string “share” or “sharing”), renaming itself to 
pose as one of 26 other common files along the way. 


SoBig First Discovered: 6/25/2003 


e A mass-mailing e-mail worm that arrives in the form of an e-mail attachment named either “Movie_0074.mpeg.pif,” 
“Document003.pif,” “Untitled1.pif,” or “Sample.pif.” The message subject title will read either “Re: Movies,” “Re: 
Sample,” “Re: Document,” or “Re: Here is that sample,” and it will appear to originate from big@boss.com. 


e The worm will scan all .WAB, .DBX, .HTML, .HTM, .EML, and .TXT files on the victim’s machine looking for e- 
mail addresses to which it can send itself and attempts to spread over the local network. 


e It will also attempt to download updates for itself. 


Klez First Discovered: 4/17/2002 


e A mass-mailing e-mail worm that arrives in the form of an e-mail attachment with a random file name. The worm ex- 
ploits a known vulnerability in MS Outlook to autoexecute on unpatched clients. Once run, the worm will try to disa- 
ble a selection of security applications—specifically virus scanners—and tries to copy itself to all local and networked 
drives, renaming itself with a random file name. 


e Virus has a very damaging payload: It drops the W32/Elkern virus, which will delete all files it can find on the infected 
machine and any mapped network drives on the 13th of all even-numbered months. 


Sasser First Discovered: 8/24/2004 


e Spreads by exploiting a recent Microsoft vulnerability, spreading from machine to machine with no user intervention 
required. 

e The worm spawns multiple threads, some of which scan the local class A subnet, others the class B subnet, and others 
completely random subnets. The worm scans public ranges like 10.0.0.0 and 192.168.0.0 only if they are part of the 
local subnet. 


The Cost of All This... 


e Nearly 115 million computers across 200 countries were infected at one time or another in 2004 by rapidly proliferat- 
ing software agents including ‘Trojans, viruses, and worms. 


e As many as 11 million computers worldwide—mostly within homes and small organizations—are now believed to be 
permanently infected and are used by criminal syndicates or malevolents to send out spam; mount distributed denial of 
service (DDoS) attacks; carry out extortion, identity theft, and phishing scams; or disseminate new viruses. 


e The total economic damage worldwide from virus proliferation—with an additional 480 new species in 2004 alone—is 
now estimated to lie between $166 billion and $202 billion for 2004 by the mi2¢ Intelligence Unit. 


e With an installed base of around 600 million Windows-based computers worldwide, average damage per installed 
machine is between $277 and $336. 


Source: Mi2g.com, “2004: Year of the Global Malware Epidemic—Top Ten lesson,” November 21, 2004. 
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pops up, but it appears only to people you are already talking to. That makes the 
approach very effective.” 

Well, you should be concerned about the Storm worm, but Gunter Ollmann, 
director of security strategy at IBM’s Internet Security Systems, says the most com- 
mon malware attack today is coming from the Slammer worm. No, you didn’t misread 
that last sentence. The Slammer worm, which hit in January 2003, is still working its 
way around the Internet and within corporate networks, according to Ollmann. And 
it’s still spreading in a big way. Slammer isn’t the only piece of old-time malware that 
is still wreaking havoc. 

“The stuff malware authors wrote a while ago is still out there and still propa- 
gating and still infecting machines,” he said. “Some have more infections now than 
they did when they were headline news. All those old vulnerabilities haven’t all 
gone away.” Slammer, the worm that brought many networks to their knees by at- 
tacking Microsoft’s SQL Server, is at the top of Ollmann’s list of current malware 
problems. 

“When we hear about the latest worm and zero-day, Slammer still beats them by 
a long shot,” he added. “Slammer is still out there on a large number of infected 
hosts and it’s still sending out malicious network traffic—malicious packets. . .. When 
people restore data after a crash, it probably is from an old system and it may not 
have the patches so it can easily be re-infected.” 

Another problem is that some users just don’t do the patching they should, while 
other users aren’t even aware that Microsoft SQL Server is running on their desktop 
because it’s common to several other applications. If they don’t know it’s there, they 
don’t know to take care of it. 

“All these old viruses are never going to go away,” said Ollmann. 


Source: Adapted from Sharon Gaudin, “Oldies but Goodies: Slammer Worm Still Attacking,” InformationWeek, 
August 24, 2007; and Gregg Keizer, “‘Storm Trojan’ Ignites Worm War,” Computerworld, February 12, 2007. 


‘Two more recent entries into the computer vulnerabilities arena are adware and spy- 
ware. By definition, adware is software that, while purporting to serve some useful 
function and often fulfilling that function, also allows Internet advertisers to display 
advertisements as banners and pop-up ads without the consent of the computer user. 
In the extreme, adware can also collect information about the user of its host compu- 
ter and send it over the Internet to its owner. This special class of adware is called 
spyware and is defined as any software that employs users’ Internet connection in the 
background without their knowledge or explicit permission. Spyware programs collect 
specific information about you, ranging from general demographics like name, ad- 
dress, and Internet surfing habits to credit card, Social Security number, user names, 
passwords, or other personal information. It is important to understand that not all 
adware programs are spyware. Proper adware represents a viable, albeit sometimes 
irritating, revenue model for many software companies that allows you to get products 
for free and, when used correctly, does not pose any significant privacy threat. In con- 
trast, spyware is and should be considered a clear threat to your privacy. 

Whereas proper adware generally allows the computer user to opt in to its use in 
exchange for free use of a piece of software, spyware operates under a rather bizarre 
ethical model. Consider the following: 


e You illegally enter a bank’s computer system and place a stealth piece of software 
in their system. If you are detected or caught, you might be prosecuted and may 
go to jail. 

e You write a worm or virus and spread it around the Internet or other networks. If 
you are detected or caught, you might be prosecuted and may go to jail. 


Commtouch: 
Trends in Virus, 
Spam, and 
Phishing 
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e You write a program that spreads a spyware agent across computer systems con- 
nected to the Internet that steals the private information of the users it infects, 
manipulates their Internet experience, and uses other people’s Web sites and 
browsers to display your advertising. If you are detected or caught, you may get 
rich, you don’t go to jail, and the computer users are left with possibly rebuilding 
their computer system to get rid of your spyware. 


Spyware has a variety of characteristics, beyond its potential for stealing valuable 
private information, which make it undesirable to most computer users. At the very 
least, it plagues the user of the infected machine with unwanted advertising. More 
often, it watches everything a user does online and sends that information back to the 
marketing company that created the spyware. Often, spyware applications add adver- 
tising links to Web pages owned by other people, for which the Web page owner does 
not get paid, and may even redirect the payments from legitimate affiliate-fee adver- 
tisers to the makers of the spyware. Other undesirable characteristics include setting 
an infected system’s browser home page and search settings to point to the spyware 
owner’s Web sites (generally loaded with advertising), often in a manner that prevents 
you from changing back the settings (referred to as home-page hijacking). In the ex- 
tremes, spyware can make a dial-up modem continually call premium-rate phone 
numbers, thus causing large telephone charges (and usually fees to the spyware owner) 
or leave security holes in an infected system allowing the makers of the spyware—or, 
in particularly bad cases, anyone at all—to download and run software on the infected 
machine (such downloads are called Trojans). In almost all cases, spyware severely de- 
grades system performance. As you can see, spyware doesn’t have any redeeming fea- 
tures except for the benefits to its owner. Its use is pervasive, and failing to protect 
against it virtually ensures that your system will eventually become infected. 

Protecting against adware and spyware generally requires the purchase and instal- 
lation of one of a variety of programs designed to prevent the software from being 
downloaded and installed. Once a computer is infected, however, removal programs 
are often not completely successful in eliminating the nuisance. 


Commtouch, a developer of technology for real-time antispam and virus protection, 
reports on a variety of spam and computer virus statistics on a periodic basis. Although 
new threats arise daily by the hundreds (if not thousands), just looking at a single quar- 
ter will provide you with an idea of what is constantly going on in this world. 

So here are some of the highlights from the first quarter of 2009. 

‘The major news of the quarter was the rapid propagation of the Conficker worm. 
Research indicates its three variations infected more than 15 million computers, 
weaving a massive zombie botnet, since appearing on the scene in November 2008. 
The botnet lay dormant for weeks, leaving computer users nervous and vulnerable; 
and only later did it begin to be activated for malicious purposes. 

Another growing trend was the use of social networking sites (e.g., Facebook, Twit- 
ter) for phishing schemes. One scam targeted Twitter users via direct messages pro- 
claiming that a blog post had been written about them or that funny pictures of them 
had been located online. If a user clicked on the link provided in suspect messages, he 
or she was directed to a landing page that looks exactly like the Twitter home page— 
but, of course, it isn’t. Upon closer inspection, however, the URL appeared to be a 
variation on the real Twitter URL, for example, http://twitter.access-logins.com. 

During the first quarter of 2009, Commtouch analyzed which categories of Web 
sites were most likely to contain malware or phishing. As expected, pornographic 
and sexually explicit sites topped the list of sites infected with malware, but the less 
expected job search sites also made an appearance, albeit further down the list. Crim- 
inal activity sites fell from first to sixth place that quarter. 
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Spammers continued to exploit legitimate sites to host their materials. They also 
masked their e-mail addresses and, most recently, have “borrowed” images from le- 
gitimate, well-known hosts to use in e-mails in hopes of bypassing spam filters. A Janu- 
ary outbreak included a “News Summary” image in the header—that particular image 
is actually hosted on the legitimate CBS News site. Although boasting different URLs 
within the messages, the sites they linked to were all for a pharmaceutical spammer 
site. Another example involved stealing the “Order Now” and “Find Exclusive Deals 
Online!” image buttons from PizzaHut. By including links to legitimate sites within 
their spam messages, the perpetrators hope to confuse traditional spam filters. 

Loan spam jumped from 3% of all spam messages in Q4 2008 to first place, with 
28% of all spam messages in Q1 2009, possibly reflective of the global economic 
situation. Pharmacy spam fell from the number one spot at 42% last quarter to third 
place with 19% that quarter. The following table shows the most popular spam topics 
in Q1 2009: 


Category of Spam % of Spam 


Loans 28 
Replicas 20 
Pharmacy 19 
Enhancers 11 
Weight Loss 

Dating 6 
Degrees 4 
Software 1 
Other 4.6 


Spam levels averaged 72% of all e-mail traffic throughout the quarter and peaked 
at 96% (96% of all e-mail!) in early January, and bottomed out at 65% in February. 


Source: Commtouch, “Q1 2009 Internet Threats Trend Report,” April 14, 2009. 


Information technology makes it technically and economically feasible to collect, 
store, integrate, interchange, and retrieve data and information quickly and easily. 
This characteristic has an important beneficial effect on the efficiency and effective- 
ness of computer-based information systems. The power of information technology to 
store and retrieve information, however, can have a negative effect on the right to 
privacy of every individual. For example, confidential e-mail messages by employees 
are monitored by many companies. Personal information is being collected about in- 
dividuals every time they visit a site on the World Wide Web. Confidential informa- 
tion on individuals contained in centralized computer databases by credit bureaus, 
government agencies, and private business firms has been stolen or misused, resulting 
in the invasion of privacy, fraud, and other injustices. The unauthorized use of such 
information has badly damaged the privacy of individuals. Errors in such databases 
could seriously hurt the credit standing or reputation of an individual. 

Governments around the world, but none more than in the United States, are debat- 
ing privacy issues and considering various forms of legislation. With regard to the Inter- 
net, opt-in versus opt-out is central to the debate over privacy legislation. Consumer 
protection groups typically endorse an opt-in standard, making privacy the default. An 
opt-in system automatically protects consumers who do not specifically allow data to be 
compiled about them. Most business interests back opt-out, arguing it doesn’t disrupt 
the flow of e-commerce. Interestingly, current laws in this regard differ between the 
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United States and Europe. In the United States, opt-out is the default position, whereas 
in Europe, consumers must opt-in or their information cannot be used. 
Additional privacy issues under debate include: 


e Accessing private e-mail conversations and computer records and collecting and 
sharing information about individuals gained from their visits to Internet Web 
sites and newsgroups (violation of privacy). 


e Always knowing where a person is, especially as mobile and paging services 
become more closely associated with people rather than places (computer 
monitoring). 


e Using customer information gained from many sources to market additional 
business services (computer matching). 


e Collecting telephone numbers, e-mail addresses, credit card numbers, and 
other personal information to build individual customer profiles (unauthorized 
personal files). 


If you don’t take the proper precautions, any time you send an e-mail, access a Web site, 
post a message to a newsgroup, or use the Internet for banking and shopping . . . whether 
you’re online for business or pleasure, you’re vulnerable to anyone bent on collecting data 
about you without your knowledge. Fortunately, by using tools like encryption and anon- 
ymous remailers—and by being selective about the sites you visit and the information 
you provide—you can minimize, if not completely eliminate, the risk of your privacy 
being violated. 


The Internet is notorious for giving its users a feeling of anonymity when in reality 
they are highly visible and open to violations of their privacy. Most of the Internet and 
its World Wide Web, e-mail, chat, and newsgroups are still a wide open, unsecured 
electronic frontier, with no tough rules on what information is personal and private. 
Information about Internet users is captured legitimately and automatically each time 
you visit a Web site or newsgroup and is recorded as a “cookie file” on your hard disk. 
Then the Web site owners or online auditing services like DoubleClick may sell the 
information from cookie files and other records of your Internet use to third parties. To 
make matters worse, much of the Net and Web is an easy target for the interception or 
theft by hackers of private information furnished to Web sites by Internet users. 

Of course, you can protect your privacy in several ways. For example, sensitive 
e-mail can be protected by encryption, if both e-mail parties use compatible encryption 
software built into their e-mail programs. Newsgroup postings can be made privately 
by sending them through anonymous remailers that protect your identity when you add 
your comments to a discussion. You can ask your Internet service provider not to sell 
your name and personal information to mailing list providers and other marketers. 
Finally, you can decline to reveal personal data and interests on online service and 
Web site user profiles to limit your exposure to electronic snooping. 


Frank W. Abagnale Jr. was a check forger for five years in the 1960s. Currently he 
runs Abagnale and Associates, a financial fraud consultancy company. His life story 
provided the inspiration for the feature film Catch Me If You Can, starring Leonardo 
DiCaprio as Frank Abagnale Jr., as well as Tom Hanks. 

Forty years ago, few people could have predicted that identity theft would be- 
come as big an epidemic as it is today. Few could have imagined protecting your ID 
would mean taking mail to the post office instead of leaving it in our mailboxes for 
pickup, shredding documents before throwing them in the trash, or that a $2 pen 
could help prevent a crime. 
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“We need to find ways to protect ourselves before identity theft strikes. We can 
make drastic improvements toward diminishing this crime, but it will never disappear 
altogether. If you haven’t been a victim of identity theft, it is because thieves haven’t 
gotten to you yet. If things fail to change, your turn will come. Prevention is not sim- 
ply a matter of following a checklist of tips, it is about education—the primary factor 
in protecting ourselves,” says Frank W. Abagnale Jr.—and he should know. 

While more and more people are using online banking, America’s 78 million 
baby boomers, who make up 15 percent of the U.S. population, continue to be a 
paper-driven majority. This group also accounts for 30 percent of fraud victims, as 
estimated by Consumer Action, a consumer-advocacy group. 

“A check holds all of the information needed to steal your identity: name, ad- 
dress, bank account, routing number. If written with a ball point pen, information 
can easily be removed by a process called check washing, a common form of identity 
theft. It is the process of taking a check or document that has already been filled out, 
removing the ink with a regular household chemical, then re-writing in a new dollar 
amount and recipient,” says Abagnale. If you are careless, your personal check could 
contribute to the 1.2 million fraudulent checks written every day. That’s more than 
13 per second. 

‘The American Bankers Association states that check fraud is growing 25 percent 
per year. To slow this growth, it is important to understand how it works. “I know 
firsthand how easy it is to perform check fraud. About 40 years ago, I cashed $2.5 mil- 
lion in fraudulent checks in every state and 26 foreign countries over a five-year 
period. I was involved in a high-stakes game of stolen identities. And to know how 
easy it can be to perform, I know it is just as easy to prevent,” he notes. 

Criminals rely on our mistakes to make their job easier. Taking a few precautions 
will make you less attractive to predators. Don’t leave mail in your mailbox overnight 
or over the weekend. When writing checks and filling out important documents, use 
a gel pen, so thieves can’t remove the ink and change the information. In addition, 
shred or tear up unwanted documents that contain personal information before dis- 
carding them. The cost of a high-quality shredder is far less than the cost of having 
your identity stolen. 

“Let’s face it; we can’t always control what is happening in our world, so we must 
take steps to control what we can. ‘Technology is here to stay, but there are still sim- 
ple and inexpensive ways to prevent identity theft when writing checks. Remember 
that a crook always looks for the easiest route to riches. Don’t hand him a map. Be 
proactive and start protecting yourself today,” says Abagnale. 


Source: Adapted from Frank Abagnale, “Abagnale: Top Tips to Prevent Identity Theft and Fraud,” CIO Magazine, 
May 24, 2007. 


Computer profiling and mistakes in the computer matching of personal data are other 
controversial threats to privacy. Individuals have been mistakenly arrested and jailed and 
people have been denied credit because their physical profiles or personal data have 
been used by profiling software to match them incorrectly or improperly with the wrong 
individuals. Another threat is the unauthorized matching of computerized information 
about you extracted from the databases of sales transaction processing systems and sold 
to information brokers or other companies. A more recent threat is the unauthorized 
matching and sale of information about you collected from Internet Web sites and news- 
groups you visit, as we discussed previously. You are then subjected to a barrage of unso- 
licited promotional material and sales contacts as well as having your privacy violated. 


Many countries strictly regulate the collection and use of personal data by business 
corporations and government agencies. Many government privacy laws attempt to en- 
force the privacy of computer-based files and communications. For example, in the 
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United States, the Electronic Communications Privacy Act and the Computer Fraud 
and Abuse Act prohibit intercepting data communications messages, stealing or de- 
stroying data, or trespassing in federal-related computer systems. Because the Internet 
includes federal-related computer systems, privacy attorneys argue that the laws also 
require notifying employees if a company intends to monitor Internet usage. Another 
example is the U.S. Computer Matching and Privacy Act, which regulates the match- 
ing of data held in federal agency files to verify eligibility for federal programs. 

More recently, new legislation intended to protect individual privacy has created 
some new challenges for organizations. Sarbanes-Oxley, the Health Insurance Porta- 
bility and Accountability Act (HIPAA), Gramm-Leach-Bliley, the USA PATRIOT 
Act, the California Security Breach Law, and Securities and Exchange Commission 
rule 17a-4 are but a few of the compliance challenges facing organizations. In an effort 
to comply with these new privacy laws, it is estimated that a typical company will 
spend 3—4 percent of its IT budget on compliance applications and projects. 


HIPAA. The Health Insurance Portability and Accountability Act (HIPAA) was en- 
acted by the U.S. Congress in 1996. It is a broad piece of legislation intended to ad- 
dress a wide variety of issues related to individual health insurance. Two important 
sections of HIPAA include the privacy rules and the security rules. Both of these por- 
tions of the law are intended to create safeguards against the unauthorized use, disclo- 
sure, or distribution of an individual’s health-related information without their specific 
consent or authorization. While the privacy rules pertain to all Protected Health In- 
formation (PHI) including paper and electronic, the security rules deal specifically 
with Electronic Protected Health Information (EPHI). These rules lay out three types 
of security safeguards required for compliance: administrative, physical, and technical. 
For each of these types, the rules identify various security standards, and for each 
standard, name both required and addressable implementation specifications. Re- 
quired specifications must be adopted and administered as dictated by the HIPAA 
regulation. Addressable specifications are more flexible. Individual covered entities 
can evaluate their own situation and determine the best way to implement addressable 
specifications. 


Sarbanes-Oxley. The Sarbanes-Oxley Act of 2002, also known as the Public Com- 
pany Accounting Reform and Investor Protection Act of 2002 and commonly called 
Sarbanes-Oxley, Sarbox, or SOX, is a U.S. federal law enacted on July 30, 2002, as a 
reaction to a number of major corporate and accounting scandals, including those af- 
fecting Enron, Tyco International, Adelphia, Peregrine Systems, and WorldCom. 
These scandals, which cost investors billions of dollars when the share prices of affected 
companies collapsed, shook public confidence in the nation’s securities markets. Named 
after sponsors U.S. Senator Paul Sarbanes and U.S. Representative Michael G. Oxley, 
the act was approved by the House by a vote of 334-90 and by the Senate 99-0. Presi- 
dent George W. Bush signed it into law, stating it included “the most far-reaching re- 
forms of American business practices since the time of Franklin D. Roosevelt.” 

The legislation set new or enhanced standards for all U.S. public company boards, 
management, and public accounting firms. It does not, however, apply to privately held 
companies. The act contains 11 sections, ranging from additional corporate board re- 
sponsibilities to criminal penalties, and requires the Securities and Exchange Commis- 
sion (SEC) to implement rulings on requirements to comply with the new law. 

Debate continues over the perceived benefits and costs of SOX. Supporters con- 
tend the legislation was necessary and has played a useful role in restoring public 
confidence in the nation’s capital markets by, among other things, strengthening cor- 
porate accounting controls. Opponents of the bill claim it has reduced America’s in- 
ternational competitive edge against foreign financial service providers, saying SOX 
has introduced an overly complex and regulatory environment into U.S. financial 
markets. 
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The opposite side of the privacy debate is the right of people to know about matters 
others may want to keep private (freedom of information), the right of people to ex- 
press their opinions about such matters (freedom of speech), and the right of people to 
publish those opinions (freedom of the press). Some of the biggest battlegrounds in the 
debate are the bulletin boards, e-mail boxes, and online files of the Internet and public 
information networks such as America Online and the Microsoft Network. The weap- 
ons being used in this battle include spamming, flame mail, libel laws, and censorship. 

Spamming is the indiscriminate sending of unsolicited e-mail messages (spam) to 
many Internet users. Spamming is the favorite tactic of mass mailers of unsolicited 
advertisements, or junk e-mail. Spamming has also been used by cyber criminals to 
spread computer viruses or infiltrate many computer systems. 

Flaming is the practice of sending extremely critical, derogatory, and often vulgar 
e-mail messages (flame mail) or newsgroup postings to other users on the Internet or 
online services. Flaming is especially prevalent on some of the Internet’s special-interest 
newsgroups. 

There have been many incidents of racist or defamatory messages on the Web that 
have led to calls for censorship and lawsuits for libel. In addition, the presence of sexu- 
ally explicit material at many World Wide Web locations has triggered lawsuits and 
censorship actions by various groups and governments. 


Cyber law is the term used to describe laws intended to regulate activities over the 
Internet or via the use of electronic data communications. Cyber law encompasses a 
wide variety of legal and political issues related to the Internet and other communica- 
tions technologies, including intellectual property, privacy, freedom of expression, and 
jurisdiction. 

The intersection of technology and the law is often controversial. Some feel that 
the Internet should not (or possibly cannot) be regulated in any form. Furthermore, 
the development of sophisticated technologies, such as encryption and cryptography, 
make traditional forms of regulation extremely difficult. Finally, the fundamental end- 
to-end nature of the Internet means that if one mode of communication is regulated 
or shut down, another method will be devised and spring up in its place. In the words 
of John Gilmore, founder of the Electronic Frontier Foundation, “the Internet treats 
censorship as damage and simply routes around it.” 

One example of advancements in cyber law is found in the Federal Trade Commis- 
sion’s (FTC) Consumer Sentinel Project. Consumer Sentinel is a unique investigative 
cyber tool that provides members of the Consumer Sentinel Network with access to 
data from millions of consumer complaints. Consumer Sentinel includes complaints 
about identity theft, do-not-call registry violations, computers, the Internet, and on- 
line auctions, telemarketing scams, advance-fee loans, and credit scams, sweepstakes, 
lotteries, and prizes, business opportunities and work-at-home schemes, health and 
weight loss products, debt collection, credit reports, and other financial matters. 

Consumer Sentinel is based on the premise that sharing information can make law 
enforcement even more effective. To that end, the Consumer Sentinel Network pro- 
vides law enforcement members with access to complaints provided directly to the 
Federal Trade Commission by consumers, as well as providing members with access to 
complaints shared by data contributors. 

According to the FTC Sentinel Report for 2007, over 800,000 complaints were 
processed through Sentinel with Internet-related offenses representing 11 percent of 
the total complaints and computer-related identity theft representing 23 percent. While 
many of these complaints are difficult, if not impossible to prosecute, we are beginning 
to see more resources being committed to addressing cyber-related crime. 

Cyber law is a new phenomenon, having emerged after the onset of the Internet. 
As we know, the Internet grew in a relatively unplanned and unregulated manner. 
Even the early pioneers of the Internet could not have anticipated the scope and 
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far-reaching consequences of the cyberspace of today and tomorrow. Although major 
legal disputes related to cyber activities certainly arose in the early 1990s, it was not 
until 1996 and 1997 that an actual body of law began to emerge. The area, clearly in its 
infancy, remains largely unsettled. The debate continues regarding the applicability of 
analogous legal principles derived from prior controversies that had nothing to do with 
cyberspace. As we progress in our understanding of the complex issues in cyberspace, 
new and better laws, regulations, and policies will likely be adopted and enacted. 


Let’s now explore some other important challenges that arise from the use of informa- 
tion technologies in business, as illustrated in Figure 11.2. These challenges include 
the potential ethical and societal impact of business applications of IT in the areas of 
employment, individuality, working conditions, and health. 


The impact of information technologies on employment is a major ethical concern 
that is directly related to the use of computers to achieve automation of work activi- 
ties. There can be no doubt that the use of information technologies has created new 
jobs and increased productivity while also causing a significant reduction in some types 
of job opportunities. For example, when computers are used for accounting systems or 
the automated control of machine tools, they are accomplishing tasks formerly per- 
formed by many clerks and machinists. Also, jobs created by information technology 
may require different types of skills and education than do the jobs that are eliminated. 
Therefore, people may become unemployed unless they can be retrained for new 
positions or new responsibilities. 

However, there can be no doubt that Internet technologies have created a host of 
new job opportunities. Many new jobs, including Internet Webmasters, e-commerce 
directors, systems analysts, and user consultants, have been created to support e-business 
and e-commerce applications. Additional jobs have been created because information 
technologies make possible the production of complex industrial and technical goods 
and services that would otherwise be impossible to produce. Thus, jobs have been created 
by activities that are heavily dependent on information technology, in such areas as 
space exploration, microelectronic technology, and telecommunications. 


One of the most explosive ethical issues concerning workplace privacy and the quality 
of working conditions in business is computer monitoring. That is, computers are be- 
ing used to monitor the productivity and behavior of millions of employees while they 
work. Supposedly, computer monitoring occurs so employers can collect productivity 
data about their employees to increase the efficiency and quality of service. However, 
computer monitoring has been criticized as unethical because it monitors individuals, 
not just work, and is done continually, which violates workers’ privacy and personal 
freedom. For example, when you call to make a reservation, an airline reservation 
agent may be timed on the exact number of seconds he or she took per caller, the time 
between calls, and the number and length of breaks taken. In addition, your conversa- 
tion may be monitored. See Figure 11.10. 

Computer monitoring has been criticized as an invasion of the privacy of employ- 
ees because, in many cases, they do not know that they are being monitored or don’t 
know how the information is being used. Critics also say that an employee’s right of 
due process may be harmed by the improper use of collected data to make personnel 
decisions. Because computer monitoring increases the stress on employees who must 
work under constant electronic surveillance, it has also been blamed for causing health 
problems among monitored workers. Finally, computer monitoring has been blamed 
for robbing workers of the dignity of their work. In its extremes, computer monitor- 
ing can create an “electronic sweatshop,” in which workers are forced to work at a 
hectic pace under poor working conditions. 
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FIGURE 11.10 
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Political pressure is building to outlaw or regulate computer monitoring in the work- 
place. For example, public advocacy groups, labor unions, and many legislators are push- 
ing for action at the state and federal level in the United States. The proposed laws would 
regulate computer monitoring and protect the worker’s right to know and right to pri- 
vacy. In the meantime, lawsuits by monitored workers against employers are increasing. 
So computer monitoring of workers is one ethical issue in business that won’t go away. 


Information technology has eliminated monotonous or obnoxious tasks in the office 
and the factory that formerly had to be performed by people. For example, word 
processing and desktop publishing make producing office documents a lot easier to 
do, and robots have taken over repetitive welding and spray painting jobs in the auto- 
motive industry. In many instances, this shift allows people to concentrate on more 
challenging and interesting assignments, upgrades the skill level of the work to be 
performed, and creates challenging jobs requiring highly developed skills in the com- 
puter industry and computer-using organizations. Thus, information technology can 
be said to upgrade the quality of work because it can upgrade the quality of working 
conditions and the content of work activities. 

Of course, some jobs in information technology—data entry, for example—are quite 
repetitive and routine. Also, to the extent that computers are used in some types of au- 
tomation, IT must take some responsibility for the criticism of assembly-line operations 
that require the continual repetition of elementary tasks, thus forcing a worker to work 
like a machine instead of like a skilled craftsperson. Many automated operations are also 
criticized for relegating people to a “do-nothing” standby role, where workers spend 
most of their time waiting for infrequent opportunities to push some buttons. Such 
effects do have a detrimental effect on the quality of work, but they must be compared 
against the less burdensome and more creative jobs created by information technology. 


A frequent criticism of information systems centers on their negative effect on the 
individuality of people. Computer-based systems are criticized as impersonal systems 
that dehumanize and depersonalize activities that have been computerized because 
they eliminate the human relationships present in noncomputer systems. 
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Another aspect of the loss of individuality is the regimentation that seems required 
by some computer-based systems. These systems do not appear to possess any flexibil- 
ity. They demand strict adherence to detailed procedures if the system is to work. The 
negative impact of IT on individuality is reinforced by horror stories that describe 
how inflexible and uncaring some organizations with computer-based processes are 
when it comes to rectifying their own mistakes. Many of us are familiar with stories of 
how computerized customer billing and accounting systems continued to demand 
payment and send warning notices to a customer whose account had already been 
paid, despite repeated attempts by the customer to have the error corrected. 

However, many business applications of IT are designed to minimize depersonali- 
zation and regimentation. For example, many e-commerce systems stress personaliza- 
tion and community features to encourage repeated visits to e-commerce Web sites. 
Thus, the widespread use of personal computers and the Internet has dramatically 
improved the development of people-oriented and personalized information systems. 


The use of information technology in the workplace raises a variety of health issues. 
Heavy use of computers is reportedly causing health problems like job stress, damaged 
arm and neck muscles, eyestrain, radiation exposure, and even death by computer-caused 
accidents. For example, computer monitoring is blamed as a major cause of computer- 
related job stress. Workers, unions, and government officials criticize computer moni- 
toring as putting so much stress on employees that it leads to health problems. 

People who sit at PC workstations or visual display terminals (VDTs) in fast-paced, 
repetitive keystroke jobs can suffer a variety of health problems known collectively as 
cumulative trauma disorders (CTDs). Their fingers, wrists, arms, necks, and backs may 
become so weak and painful that they cannot work. Strained muscles, back pain, and 
nerve damage may result. In particular, some computer workers may suffer from carpal 
tunnel syndrome, a painful, crippling ailment of the hand and wrist that typically 
requires surgery to cure. 

Prolonged viewing of video displays causes eyestrain and other health problems in 
employees who must do this all day. Radiation caused by the cathode ray tubes (CRIS) 
that produce video displays is another health concern. CRTs produce an electromag- 
netic field that may cause harmful radiation of employees who work too close for too 
long in front of video monitors. Some pregnant workers have reported miscarriages 
and fetal deformities due to prolonged exposure to CRTs at work. Studies have failed 
to find conclusive evidence concerning this problem; still, several organizations rec- 
ommend that female workers minimize their use of CRTs during pregnancy. 


Solutions to some of these health problems are based on the science of ergonomics, 
sometimes called human factors engineering. See Figure 11.11. The goal of ergonomics 
is to design healthy work environments that are safe, comfortable, and pleasant for 
people to work in, thus increasing employee morale and productivity. Ergonomics 
emphasizes the healthy design of the workplace, workstations, computers and other 
machines, and even software packages. Other health issues may require ergonomic 
solutions emphasizing job design rather than workplace design. For example, this ap- 
proach may require policies providing for work breaks from heavy video monitor use 
every few hours, while limiting the CRT exposure of pregnant workers. Ergonomic 
job design can also provide more variety in job tasks for those workers who spend 
most of their workday at computer workstations. 


As we noted at the beginning of the chapter, the Internet and other information techno- 
logies can have many beneficial effects on society. We can use information technologies 
to solve human and social problems through societal solutions such as medical diagnosis, 
computer-assisted instruction, governmental program planning, environmental quality 
control, and law enforcement. For example, computers can help diagnose an illness, 
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FIGURE 11.11 
Ergonomic factors in the 
workplace. Note that good 
ergonomic design considers 
tools, tasks, the workstation, 
and the environment. 
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prescribe necessary treatment, and monitor the progress of hospital patients. Computer- 
assisted instruction (CAI) and computer-based training (CBT) enable interactive 
instruction tailored to the needs of students. Distance learning is supported by tele- 
communications networks, videoconferencing, e-mail, and other technologies. 

Information technologies can be used for crime control through various law enfor- 
cement applications. For example, computerized alarm systems allow police to identify 
and respond quickly to evidence of criminal activity. Computers have been used to 
monitor the level of pollution in the air and in bodies of water, detect the sources of 
pollution, and issue early warnings when dangerous levels are reached. Computers are 
also used for the program planning of many government agencies in such areas as urban 
planning, population density and land use studies, highway planning, and urban transit 
studies. Computers are being used in job placement systems to help match unemployed 
persons with available jobs. These and other applications illustrate that information 
technology can be used to help solve the problems of society. 

Obviously, individuals or organizations that do not accept ethical responsibility for 
their actions cause many of the detrimental effects of information technology. Like 
other powerful technologies, information technology possesses the potential for great 
harm or great good for all humankind. If managers, business professionals, and IS 
specialists accept their ethical responsibilities, then information technology can help 
improve living and working conditions for all of society. 
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Tele eis Security Management of 
Information Technology 


Introduction With Internet access proliferating rapidly, one might think that the biggest obstacle to 
e-commerce would be bandwidth. But it’s not; the number one problem is security. And part 
of the problem is that the Internet was developed for interoperability, not impenetrability. 


As we saw in Section I, there are many significant threats to the security of 
information systems in business. That’s why this section is dedicated to exploring 
the methods that companies can use to manage their security. Business managers 
and professionals alike are responsible for the security, quality, and performance of the 
business information systems in their business units. Like any other vital business 
assets, hardware, software, networks, and data resources need to be protected by a 
variety of security measures to ensure their quality and beneficial use. That’s the 
business value of security management. 

Read the Real World Case on the next page. We can learn a lot about why IT 
managers are increasingly concerned about keeping their sensitive data from getting 
out, and how they are facing this challenge. See Figure 11.12. 


Tools of The goal of security management is the accuracy, integrity, and safety of all information 
Securit system processes and resources. Thus, effective security management can minimize 
y errors, fraud, and losses in the information systems that interconnect today’s companies 


Mana gemen t and their customers, suppliers, and other stakeholders. As Figure 11.13 illustrates, secu- 
rity management is a complex task. As you can see, security managers must acquire and 
integrate a variety of security tools and methods to protect a company’s information 
system resources. We discuss many of these security measures in this section. 


Top Executives What do CXOs and other business leaders really think about information security? A 

recent survey and interviews conducted by InformationWeek reveal they’re more aligned 

; with “infosec” [information security] teams than you might think—when comes to in- 

Security Is a Top formation security, non-IT execs just might get it. The results suggest that C-level 

Priority executives not only recognize the importance of information security, but actively sup- 
port their IT organizations’ efforts to protect corporate assets and reduce risk. 

At times, that comes as a surprise. The rants from IT pros about stingy executives 
who are ignorant of critical security issues and regard security as an impediment to 
doing business are quite common. Indeed, conflicts between executives and IT or- 
ganizations are still common. Moneymaking opportunities that present considerable 
security risks still go forward over the objections of information security teams. Con- 
versely, security teams don’t always appreciate that risk can’t be entirely eliminated, 
or that some security measures go so far as to make information and technology too 
cumbersome to be useful. 

Among the more security-minded executives is William McNabb, CEO of in- 
vestment firm Vanguard Group. He sums up his company’s information security re- 
sponsibility this way: “We manage more than a trillion dollars of other people’s 
money. That’s important trust they’ve placed with us, and we have to do everything 
in our power to protect it.” Seventy-five percent of survey respondents say informa- 
tion security is among the highest of corporate priorities. 

There are four major reasons for this high level of executive support. First is the 
rise of high-volume theft of credit card information, Social Security numbers, and 
other personal data. Such attacks began to make headlines in 2005, when DSW Shoe 
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t’s not what’s coming into the corporate network that con- 

cerns Gene Fredriksen. It’s what’s going out. For the chief 

security officer at securities brokerage Raymond James 
Financial Inc. in St. Petersburg, Florida, leakage of sensitive 
customer data or proprietary information is the new priority. 
The problem isn’t just content within e-mail messages, but 
the explosion of alternative communication mechanisms that 
employees are using, including instant messaging, blogs, 
FTP transfers, Web mail, and message boards. It’s not 
enough to just monitor e-mail, Fredriksen says. “We have to 
evolve and change at the same pace as the business,” he 
explains. “Things are coming much faster.” 

So Fredriksen is rolling out a network-based outbound 
content monitoring and control system. The software, from 
San Francisco-based Vontu Inc., sits on the network and 
monitors traffic in much the same way that a network-based 
intrusion-detection system would. Rather than focusing on 
inbound traffic, however, Vontu monitors the network activ- 
ity that originates from Raymond James’ 16,000 users. It ex- 
amines the contents of each network packet in real time and 
issues alerts when policy violations are found. 

Network-based systems do more than just rule-based 
scanning for Social Security numbers and other easily 


FIGURE 11.12 


Companies are starting to focus on keeping 
sensitive information within their boundaries. 
Outbound content management tools are being 
deployed to monitor outgoing traffic. 
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identifiable content. They typically analyze sensitive docu- 
ments and content types and generate a unique fingerprint for 
each. Administrators then establish policies that relate to that 
content, and the system uses linguistic analysis to identify sen- 
sitive data and enforce those policies as information moves 
across the corporate LAN. The systems can detect both com- 
plete documents and “derivative documents,” such as an IM 
exchange in which a user has pasted a document fragment. 

When BCD Travel began to investigate what it would take 
to get Payment Card Industry (PCI) certification for handling 
customer credit card data, Senior Vice President of Technol- 
ogy Brian Flynn realized that he didn’t really know how his 
employees were handling such information. Not only could 
PCI certification be denied, but the travel agency’s reputation 
and business could also be harmed. At the National Football 
League’s Houston Texans, IT Director Nick Ignatiev came to 
the same realization as he investigated PCI certification. 

In both cases, vendors they’d been working with suggested 
a new technology: outbound content management tools that 
look for proprietary information that might be leaving the 
company via e-mail, instant messaging, or other avenues. 
Flynn started to use Reconnex’s iGuard network appliance, 
with vivid results. “It was a shock to see what was going out, 
and that gave us the insight to take action,” he says. After 
Ignatiev examined his message flow using Palisade Systems’ 
PacketSure appliance, he too realized that his employees 
needed to do a better job protecting critical data, including 
customer credit cards, scouting reports, and team rosters. 

How does the technology work? Basically, the tools filter 
outgoing communication across a variety of channels, such as 
e-mail and IM, to identify sensitive information. They’re based 
on some of the same technologies—like pattern matching and 
contextual text search—that help antivirus and antispam tools 
block incoming threats. 

‘Tools typically come with basic patterns already defined 
for personally identifiable information, such as Social Secu- 
rity and credit card numbers, as well as templates for com- 
monly private information, such as legal filings, personnel 
data, and product testing results. 

Companies typically look for three types of information 
using these tools, notes Paul Kocher, president of the Cryp- 
tography Research consultancy. The first—and easiest—type 
is personally identifiable information, such as Social Security 
numbers and credit card information. The second type is 
confidential company information, such as product specifi- 
cations, payroll information, legal files, or supplier contracts. 
Although this information is harder to identify, most tools 
can uncover patterns of language and presentation when 
given enough samples, Kocher notes. The third category is 
inappropriate use of company resources, such as potentially 
offensive communications involving race. 

The traditional security methods may restrict sensitive data 
to legitimate users, but Flynn and Ignatiev found that even 


legitimate users were putting the data, and their companies, at 
risk. At BCD Travel, a corporate travel service, nearly 80 percent 
of its 10,000 employees work in call centers and thus have le- 
gitimate access to sensitive customer information. BCD and the 
Texans did not find malicious activity; instead, they found peo- 
ple who were unaware of security risks, such as sending a cus- 
tomer’s credit card number by e-mail to book a flight or room 
from a vendor that didn’t have an online reservations system. 

Fidelity Bancshares Inc. in West Palm Beach, Florida, is 
using the message-blocking feature in PortAuthority from 
PortAuthority Technologies Inc. in Palo Alto, California. 
Outbound e-mail messages that contain Social Security 
numbers, account numbers, loan numbers, or other personal 
financial data are intercepted and returned to the user, along 
with instructions on how to send the e-mail securely. 

Joe Cormier, vice president of network services, says he 
also uses PortAuthority to catch careless replies. Customers 
often send in questions and include their account informa- 
tion. “The customer service rep would reply back without 
modifying the e-mail,” he says. 

“The challenge with any system like this is they’re only as 
valuable as the mitigation procedures you have on the back 
end,” notes Fredriksen. Another key to success is educating us- 
ers about monitoring to avoid “Big Brother” implications. “We 
are making sure that the users understand why we implement 
systems like this and what they’re being used for,” he says. 

Mark Rizzo, vice president of operations and platform 
engineering at Perpetual Entertainment Inc. in San Francisco, 
learned in a previous job the consequences of not protecting 
intellectual property. “I have been on the side of things dis- 
appearing and showing up at competitors,” he says. The 
start-up online game developer deployed ‘Tablus’s Content 
Alarm to remedy the problem. Rizzo uses it to look for sus- 
picious activity, such as large files that are moving outside 
the corporate LAN. Now that the basic policies and rules 
have been set, the system doesn’t require much ongoing 
maintenance, he says. Still, Rizzo doesn’t use blocking because 
he would need to spend significant amounts of time to create 
more policies in order to avoid false positives. 


CASE STUDY QUESTIONS 


1. Barring illegal activities, why do you think that employ- 
ees in the organizations featured in the case do not realize 
themselves the dangers of loosely managing proprietary 
and sensitive information? Would you have thought of 
these issues? 


2. How should organizations strike the right balance be- 
tween monitoring and invading their employees’ privacy, 
even if it would be legal for them to do so? Why is it im- 
portant that companies achieve this balance? What would 
be the consequences of being too biased to one side? 


3. The IT executives in the case all note that outbound 
monitoring and management technologies are only part 
of an overall strategy, and not their primary defense. 
What should be the other components of this strategy? 
Which weight would you give to human and techno- 

logical factors? Why? 
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Although companies in highly regulated industries can 
justify investing in outbound content monitoring and block- 
ing tools, other organizations may have to sharpen their 
pencils to justify the cost. These are very expensive solutions 
to deploy. Fredriksen, who built a system to support 16,000 
users, says that for a setup with about 20,000 users, “you’re 
in the $200,000 range, easily.” 

With outbound content management tools, “you can build 
very sophisticated concept filters,” says Cliff Shnier, vice presi- 
dent for the financial advisory and litigation practice at Aon 
Consulting. Typically, the tools come with templates for types 
of data that most enterprises want to filter, and they can analyze 
contents of servers and databases to derive filters for company- 
specific information, he says. (Consulting firms can improve 
these filters using linguists and subject matter experts.) 

As any user of an antispam tool knows, no filter is perfect. 
“A big mistake is to have too much faith in the tools. They 
can’t replace trust and education,” says consultant Kocher. 
They also won’t stop a determined thief, he says. Even when 
appropriately deployed, these tools don’t create an ironclad pe- 
rimeter around the enterprise. For example, they can’t detect 
information that flows through Skype voice over IP (VoIP) 
service or SSL (Secure Sockets Layer) connections, Kocher 
notes. They can also flood logs with false positives, which 
makes it hard for IT security staff to identify real problems. 

Thats why CIOs should look at outbound content man- 
agement as a supplemental tool to limit accidental or unknow- 
ing communication of sensitive data, not as the primary 
defense. Fredriksen says that although Vontu is important, it’s 
still just one piece of a larger strategy that includes an overlap- 
ping set of controls that Raymond James uses to combat in- 
sider threats. “This augments the intrusion-detection and 
firewall systems we have that control and block specific ports,” 
he says. “It’s just a piece. It’s not the Holy Grail.” 


Source: Adapted from Galen Gruman, “Boost Security with Outbound 
Content Management,” CIO Magazine, April 9, 2007; and Robert Mitchell, 
“Border Patrol: Content Monitoring Systems Inspect Outbound Communi- 
cations,” Computerworld, March 6, 2006. 


REAL WORLD ACTIVITIES 


. Technologies such as VoIP used by Skype and similar 
products make it more difficult to monitor outgoing in- 
formation. Search the Internet to help you understand 
these technologies and why these problems arise. Other 
than banning them, what alternatives would you sug- 
gest to companies facing this problem? Prepare a pres- 
entation to deliver your recommendations. 


2. As a customer of many of the companies noted in the 
case, or others in the same industries, what is your ex- 
pectation about the measures and safeguards that these 
organizations have implemented to protect inappropriate 
leaking of your personal information? After reading the 
case, has your expectation changed? Break into small 
groups with your classmates to discuss these issues. 
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Warehouse and ChoicePoint were hit. In the DSW case, thieves stole 1.4 million 
credit card numbers from stores in 25 states. Meanwhile, poor controls at Choice- 
Point enabled scam artists posing as legitimate businesses to access consumer records 
and perpetrate identity theft. Since then, a string of larger information thefts from 
the likes of the Hannaford Bros, grocery chain, job site Monster.com, retailer TJX, 
and, most recently, Heartland Payment Systems has put executives on notice: Such 
breaches can no longer be dismissed as merely isolated incidents. 

Second, the high-profile thefts have triggered a number of state breach-disclosure 
laws, which compel companies to publicize the theft or loss of personally identifiable 
information. Companies also face industry data-protection standards, the most promi- 
nent of which is the Payment Card Industry Data Security Standard, which requires a 
variety of security measures for businesses that accept and process credit cards. 

The third trend changing executives’ attitudes about security is the rising cost of 
information breaches. 

From lawsuit payouts to fines to the expense of setting up credit-monitoring ser- 
vices for victimized customers, executives can see exactly how much a security failure 
costs. U.S. companies paid an average of $202 per exposed record in 2008, up from 
$197 in 2007, according to a report by the Ponemon Institute, a privacy management 
researcher. The report also says the average total cost per breach for each company was 
$6.6 million in 2008, up from $6.3 million in 2007 and $4.7 million in 2006. 

The fourth major trend is the damage to a company’s brand and reputation. 
While it’s hard to put a price on the loss of customer trust or efforts to repair a 
brand, no CEO wants to have to try to do that math. 


Source: Adapted from Andrew Conry-Murray, “A Unified Front,” InformationWeek, February 16, 2009. 


Few professionals today face greater challenges than those IT managers who are develop- 
ing Internet security policies for rapidly changing network infrastructures. How can they 
balance the need for Internet security and Internet access? Are the budgets for Internet se- 
curity adequate? What impact will intranet, extranet, and Web application development 
have on security architectures? How can they come up with best practices for developing 
Internet security policy? 


Encryption 
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The security of today’s networked business enterprises is a major management 
challenge. Many companies are still in the process of getting fully connected to the 
Web and the Internet for e-commerce and are reengineering their internal business 
processes with intranets, e-business software, and extranet links to customers, suppli- 
ers, and other business partners. Vital network links and business flows need to be 
protected from external attack by cyber criminals and from subversion by the criminal 
or irresponsible acts of insiders. This protection requires a variety of security tools and 
defensive measures and a coordinated security management program. Let’s take a look 
at some of these important security defenses. 


Encryption of data has become an important way to protect data and other computer 
network resources, especially on the Internet, intranets, and extranets. Passwords, mes- 
sages, files, and other data can be transmitted in scrambled form and unscrambled by 
computer systems for authorized users only. Encryption involves using special mathe- 
matical algorithms, or keys, to transform digital data into a scrambled code before they 
are transmitted, and then to decode the data when they are received. The most widely 
used encryption method uses a pair of public and private keys unique to each individual. 
For example, e-mail could be scrambled and encoded using a unique public key for the 
recipient that is known to the sender. After the e-mail is transmitted, only the recipient's 
secret private key could unscramble the message. See Figure 11.14. 

Encryption programs are sold as separate products or built into other software 
used for the encryption process. There are several competing software encryption 
standards, but the top two are RSA (by RSA Data Security) and PGP (which stands for 
“pretty good privacy”), a popular encryption program available on the Internet. Soft- 
ware products including Microsoft Windows XP, Novell NetWare, and Lotus Notes 
offer encryption features using RSA software. 


FIGURE 11.14 How public key/private key encryption works. 
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FIGURE 11.15 An example of the Internet and intranet firewalls in a company’s networks. 
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Another important method for control and security on the Internet and other networks 
is the use of firewall computers and software. A network firewall can be a communica- 
tions processor, typically a router, or a dedicated server, along with firewall software. A 
firewall serves as a gatekeeper system that protects a company’s intranets and other 
computer networks from intrusion by providing a filter and safe transfer point for ac- 
cess to and from the Internet and other networks. It screens all network traffic for 
proper passwords or other security codes and only allows authorized transmissions in 
and out of the network. Firewall software has also become an essential computer sys- 
tem component for individuals connecting to the Internet with DSL or cable modems 
because of their vulnerable, “always-on” connection status. Figure 11.15 illustrates an 
Internet/intranet firewall system for a company. 

Firewalls can deter, but not completely prevent, unauthorized access (hacking) into 
computer networks. In some cases, a firewall may allow access only from trusted locations 
on the Internet to particular computers inside the firewall, or it may allow only “safe” infor- 
mation to pass. For example, a firewall may permit users to read e-mail from remote loca- 
tions but not run certain programs. In other cases, it is impossible to distinguish the safe use 
of a particular network service from unsafe use, so all requests must be blocked. The fire- 
wall may then provide substitutes for some network services (such as e-mail or file trans- 
fers) that perform most of the same functions but are not as vulnerable to penetration. 


Jeremiah Grossman wants you to know that firewalls and SSL encryption won’t pre- 
vent a hacker from breaking into your e-commerce Web site, compromising your 
customers’ data, and possibly stealing your money. That’s because most Web site at- 
tacks these days exploit bugs in the Web application itself, rather than in the operat- 
ing system on which the application is running. 

Grossman is the founder and chief technology officer of WhiteHat Security, a Sili- 
con Valley firm that offers an outsourced Web site vulnerability management service. 
Using a combination of proprietary scanning and so-called ethical hacking, WhiteHat 
assesses the security of its clients’ Web sites, looking for exploitable vulnerabilities. 
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WhiteHat does its scanning without access to the client’s source code and from 
outside the client’s firewall using the standard HTTP Web protocol. This approach 
is sometimes called “black box testing” because the Web site’s contents are opaque to 
the security assessors. The problem with black box testing, of course, is that it is sure 
to miss many vulnerabilities and back doors that are hidden in the source code. Black 
box testing can only find vulnerabilities that are visible to someone who is using your 
Web site, but the advantage of this approach is that it precisely mimics how a hacker 
would most likely conduct his reconnaissance and break-in. 

From his vantage point at WhiteHat, Grossman has seen several organizations 
migrate Web sites from Microsoft’s original ASP to ASP.NET. “ASP classic, the first 
generation of ASP websites, are generally riddled with vulnerabilities,” he says. Yet 
when these organizations rewrote their applications using ASP.NET, suddenly their 
applications improved tremendously security-wise. “Same developers, two different 
frameworks. It wasn’t an education problem; it was a technology problem.” 

At another company—a financial institution—WhiteHat discovered an easily ex- 
ploited vulnerability that would have let customers steal money. WhiteHat called up 
the company, and the problem was hot-fixed within 24 hours. A few months later, 
the vulnerability came back. “The developers were working on the next release, set 
to come out in two to three months. Some developer did not back-port the hot-fix 
from the production server to the development server. So when the push occurred 
three months later, they pushed the vulnerability again.” Ugh! 

You may not be a big fan of this approach to security, but if you talk to Grossman for 
a couple of hours, he will convince you that it’s a necessary part of today’s e-commerce 
Web sites. Yes, it would be nice to eliminate these well-known bugs with better coding 
practices, but we live in the real world. It’s better to look for the bugs and fix them than 
to just cross your fingers and hope that they aren’t there. 


Source: Adapted from Simson Garfinkel, “An Introduction to the Murky Science of Web Application Security,” CIO 
Magazine, May 11, 2007. 


Major attacks against e-commerce and corporate Web sites in the past few years have 
demonstrated that the Internet is extremely vulnerable to a variety of assaults by 
criminal hackers, especially distributed denial of service (DDOS) attacks. Figure 11.16 
outlines the steps organizations can take to protect themselves from DDOS attacks. 

Denial of service assaults via the Internet depend on three layers of networked 
computer systems: (1) the victim’s Web site, (2) the victim’s Internet service provider 
(ISP), and (3) the sites of “zombie” or slave computers that the cyber criminals comman- 
deered. For example, in early 2000, hackers broke into hundreds of servers, mostly poorly 
protected servers at universities, and planted ‘Trojan horse.exe programs, which were 
then used to launch a barrage of service requests in a concerted attack on e-commerce 
Web sites like Yahoo! and eBay. 

As Figure 11.16 shows, defensive measures and security precautions must be taken 
at all three levels of the computer networks involved. These are the basic steps 


Defending against Denial of Service 


e At the zombie machines: Set and enforce security policies. Scan regularly for Trojan 
horse programs and vulnerabilities. Close unused ports. Remind users not to open .exe 
mail attachments. 


e At the ISP: Monitor and block traffic spikes. Filter spoofed IP addresses. Coordinate 
security with network providers. 


e At the victim’s Web site: Create backup servers and network connections. Limit con- 
nections to each server. Install multiple intrusion-detection systems and multiple routers 
for incoming traffic to reduce choke points. 
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As If Phishing 
Wasn't Enough: 
Denial of Service 
Attacks 


companies and other organizations can take to protect their Web sites from denial of 
service and other hacking attacks. Now let’s take a look at a real-world example of a 
more sophisticated defense technology. 


Kevin Dougherty has seen his share of spam and phishing scams, as has any IT leader 
in the financial services industry. But the sender’s name on this particular e-mail sent 
a shudder down his spine: It was from one of his board members at the Central 
Florida Educators’ Federal Credit Union (CFEFCU). The e-mail claimed in con- 
vincing detail that there was a problem with the migration to a new Visa credit 
card that the board member was promoting to the credit union’s customers. The 
fraudulent message urged customers to click on a link—to a phony Web site set up 
by criminals—and enter their account information to fix the problem. 

But what happened later that Friday afternoon—after Dougherty, who is senior vice 
president of IT and marketing, had wiped the credit card migration information off the 
Web site and put up an alert warning customers of the scam—really scared him. 

Around 2 p.m., the site suddenly went dark, like someone had hit it with a base- 
ball bat. That’s when Dougherty realized that he was dealing with something he 
hadn’t seen before. And he couldn’t describe it with conventional terms like phishing 
or spamming. This was an organized criminal conspiracy targeting his bank. “This 
wasn’t random,” he says. “They saw what we were doing with the credit card and came 
at us hard.” 

Dougherty’s Web site lay in a coma from a devastating distributed denial of serv- 
ice (DDOS) attack that, at its peak, shot more than 600,000 packets per second of 
bogus service requests at his servers from a coordinated firing squad of compromised 
computers around the globe. That the criminals had the skill and foresight to launch 
a two-pronged attack against Dougherty and his customers was a clear indication of 
how far online crime, which is now a $2.8 billion business according to research 
company Gartner, has come in the past few years. 

Obviously, the first thing Dougherty had to do was stop the attack. He had to 
hurriedly assemble a coalition of vendors and consultants to help him, and then he 
had to convince his CEO that drastic steps were needed—steps that would tempo- 
rarily cut off customers from any possibility of getting to their accounts online until 
the problems were completely eradicated. Dougherty wanted to have the site tem- 
porarily blacklisted with his telecom provider, BellSouth, to deflect the attack, 
thereby reducing pressure on the site and giving him the time and flexibility to 
make protective changes. But his CEO resisted—as might anyone who has not ex- 
perienced an attack. “He wanted to keep it up so we could service the members,” 
says Dougherty. 

At 11 p.m., after a long night of battling the attackers and plotting strategy, 
Dougherty finally convinced his CEO to have the site blacklisted and to take a break 
until morning. 

Continuing in a tired and emotional state would have played into the attackers’ 
hands. “It’s a mind game,” says Dougherty. 

By Saturday morning, Dougherty had RSA, a security vendor he called in when 
the attacks began, working to set up a “take-down” service that seeks out and dis- 
patches criminal Web sites (in this case, more than 30) with its own cyber baseball 
bat. Meanwhile, BellSouth began beefing up security around the credit union site to 
try to thwart attacks. 

The site was back up by Saturday evening. In the end, 22 customers gave up their 
information to the thieves and the total losses were “less than five figures,” says 
Dougherty. Though the credit union had averted disaster, “it was a rude awakening,” 
he says. 


Source: Adapted from Nancy Weil, “Your Plan to Fight Cyber Crime,” CIO Magazine, June 15, 2007. 
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Spot checks just aren’t good enough anymore. The tide is turning toward systematic mon- 
itoring of corporate e-mail traffic using content-monitoring software that scans for trou- 
blesome words that might compromise corporate security. The reason: Users of monitoring 
software said they’re concerned about protecting their intellectual property and guarding 
themselves against litigation. 


As we mentioned in Section I, Internet and other online e-mail systems are one of the 
favorite avenues of attack by hackers for spreading computer viruses or breaking into 
networked computers. E-mail is also the battleground for attempts by companies to en- 
force policies against illegal, personal, or damaging messages by employees versus the de- 
mands of some employees and others who see such policies as violations of privacy rights. 


Just the mention of employee monitoring raises concerns about Big Brother and pri- 
vacy, as well as issues of trust, loyalty, and respect. Yet monitoring employee use of 
e-mail, the Internet, and telephones in the workplace has become more common than 
gatherings at the office watercooler. Ten years ago, employee monitoring meant that 
the supervisor would walk the floor and watch the activities of workers. Today, busi- 
nesses increasingly use automated tools to ensure that workers are completing tasks, not 
wasting resources, and complying with a growing list of government regulations. 

A report by the Privacy Rights Clearinghouse says there’s little that employees can do 
to limit monitoring by their employers. Bosses have the right to listen to workers’ phone 
calls in most instances, obtain records of those calls, use software to see what’s being 
displayed on computer screens, check what information is stored on hard disks, and 
track and record e-mail. Some companies have little choice but to monitor employees. 

Presidio Financial Partners provides investment consulting services, controlling 
approximately $3 billion in assets for 150 clients. It falls under the scrutiny of the Se- 
curities and Exchange Commission and the National Association of Securities Dealers, 
and it must provide regulators with access to e-mail and other correspondence between 
the company and its clients, as well as maintain an archive of the information. 

“We have to have this information at our disposal,” says Jeff Zlot, managing di- 
rector for Presidio. “But our clients are high-profile individuals, and the last thing 
we need is information getting into the wrong hands.” 

Presidio began to use Fortiva Supervision software from Fortiva to monitor, 
track, and archive the e-mail of its consultants, and it was pleased that Fortiva keeps 
archived material encrypted. Fortiva Supervision is used to track e-mail between 
Presidio salespeople and clients, specifically looking for keywords that could pose 
problems. “We can show the regulators that we set up guidelines and that we are 
enforcing those guidelines from a sales supervision standpoint,” Zlot says. 

Phrases that will be flagged by the software include such things as guaranteed 
return or guaranteed performance, or any time the word complaint is used. If the 
keywords are spotted, supervisors must review the e-mail. As many as 50 e-mails 
a day get queued for review. “This forces the sales supervisors to look and approve 
the work the employees are doing,” Zlot says. 

‘The growing number of automated monitoring tools makes it easier for employ- 
ers to keep an eye on what employees are doing than in the old days—when you re- 
ally had to keep an eye on them. 


Source: Adapted from Darrell Dunn, “Who's Watching Now?” InformationWeek, February 27, 2006. 


Is your PC protected from the latest viruses, worms, Trojan horses, and other malicious pro- 
grams that can wreak havoc on your PC? Chances are it is, if it’s periodically linked to the 
corporate network. These days, corporate antivirus protection is a centralized function of in- 
formation technology. Someone installs it for you on your PC and notebook or, increasingly, 
distributes it over the network. The antivirus software runs in the background, popping up 
every so often to reassure you. The trend right now is to automate the process entirely. 
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FIGURE 11.17 
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Many companies are building defenses against the spread of viruses by centralizing the 
distribution and updating of antivirus software as a responsibility of their IS depart- 
ments. Other companies are outsourcing the virus protection responsibility to their 
Internet service providers or telecommunications or security management companies. 

One reason for this trend is that the major antivirus software companies like McAfee 
(VirusScan) and Symantec (Norton Antivirus) have developed network versions of 
their programs, which they are marketing to ISPs and others as a service they should 
offer to all their customers. The antivirus companies are also marketing security suites 
of software that integrate virus protection with firewalls, Web security, and content- 
blocking features. See Figure 11.17. 


Antivirus software makes Greg Shipley so mad he has to laugh. “The relationship 
between signature-based antivirus companies and the virus writers is almost comical. 
One releases something and then the other reacts, and they go back and forth. It’s a 
silly little arms race that has no end.” 

Shipley, chief technology officer at Neohapsis, a security consulting firm in 
Chicago, says the worst part is that the arms race isn’t helpful either to him or to his 
clients. “I want to get off of signature-based antivirus as rapidly as possible. I think 
it’s a broken model, and I think it’s an incredible CPU hog.” 

Antivirus as an industry has modeled itself on the human immune system, which 
slaps a label on things like viruses so it knows to attack them when it sees that same 
label, or signature, again. Signature-based antivirus has moved well beyond that sim- 
ple type of signature usage (although, at the beginning, it did look for specific lines 
of code). The number of malware signatures that security software company F-Secure 
tracked doubled in 2007, and while you might cynically expect such a company to 
say there’s more malware out there, 2007’s total doubled the number of signatures 
F-Secure had built up over the previous 20 years. 


Other Security 
Measures 


Security Codes 


Backup Files 


Chapter 11 / Security and Ethical Challenges © 491 


Antivirus firms think that reports of their death are greatly exaggerated, thank 
you very much—even those that aren’t overly reliant on signatures, like BitDefender, 
which says that signature-based techniques account for only 20 percent of the mal- 
ware it catches. Corporate CISOs (chief information security officers) certainly don’t 
expect to find one answer to their problems. “If you rely on signatures for security, 
you're pretty much dead in the water,” says Ken Pfeil, head of information security 
for the Americas region of WestLB, a German bank. Pfeil thinks signatures are use- 
ful and his firm uses them, but when new malware appears, he often finds it faster to 
try to break it down himself to understand its potential effects, rather than wait for 
his vendor to give him an update. His firm has also adopted tools that use heuristics 
techniques and anomaly testing, to add oomph to its antivirus approach. 

‘That kind of layered approach to software fits with where Natalie Lambert, an 
analyst at Forrester Research, thinks the market is going. She says that signature- 
based antivirus is “table stakes” for security software, and techniques like heuristic 
information processing systems, or HIPS, which look for suspicious actions by soft- 
ware, is like an application opening itself from the Temp folder. The downside to 
these technologies is that none is as simple and alluring as the old signature-based 
antivirus, which she called a “set it and forget it” technology. She notes that HIPS 
technologies are difficult to manage and will never be as simple as the old model, 
although she expects they will get easier over time. 

Antivirus firms agree that they are becoming something different; however, 
David Harley, administrator of Avien, the antivirus information exchange network, 
thinks that there are psychological reasons that antivirus software is unlikely to go 
away. “The idea of a solution that stops real threats and doesn’t hamper nonmali- 
cious objects and processes is very attractive. People (at any rate, those who aren’t 
security specialists) like the idea of threat-specific software, as long it catches all in- 
coming malware and doesn’t generate any false positives, because then they can just 
install it and forget about it. Unfortunately, that’s an unattainable ideal.” 

Note to Greg Shipley: Don’t hold your breath on getting rid of your antivirus 
software. 


Source: Adapted from Michael Fitzgerald, “The Future of Antivirus,” Computerworld, April 14, 2008. 


Let’s now briefly examine a variety of security measures that are commonly used to 
protect business systems and networks. These include both hardware and software 
tools, like fault-tolerant computers and security monitors, and security policies and 
procedures, like passwords and backup files. All are part of an integrated security man- 
agement effort at many companies today. 


Typically, a multilevel password system is used for security management. First, an end 
user logs on to the computer system by entering his or her unique identification code, or 
user ID. Second, the end user is asked to enter a password to gain access into the system. 
(Passwords should be changed frequently and consist of unusual combinations of upper- 
and lowercase letters and numbers.) Third, to access an individual file, a unique file 
name must be entered. In some systems, the password to read the contents of a file is 
different from that required to write to a file (change its contents). This feature adds 
another level of protection to stored data resources. For even stricter security, however, 
passwords can be scrambled, or encrypted, to avoid their theft or improper use, as we will 
discuss shortly. In addition, smart cards, which contain microprocessors that generate 
random numbers to add to an end user’s password, are used in some secure systems. 


Backup files, which are duplicate files of data or programs, are another important security 
measure. Files can also be protected by file retention measures that involve storing 
copies of files from previous periods. If current files are destroyed, the files from previous 
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periods can be used to reconstruct new current files. Sometimes, several generations 
of files are kept for control purposes. Thus, master files from several recent periods of 
processing (known as child, parent, and grandparent files) may be kept for backup purposes. 
Such files may be stored off-premises, that is, in a location away from a company’s data 
center, sometimes in special storage vaults in remote locations. 


Security of a network may be provided by specialized system software packages known 
as system security monitors. See Figure 11.18. System security monitors are programs 
that monitor the use of computer systems and networks and protect them from unau- 
thorized use, fraud, and destruction. Such programs provide the security measures 
needed to allow only authorized users to access the networks. For example, identifica- 
tion codes and passwords are frequently used for this purpose. Security monitors also 
control the use of the hardware, software, and data resources of a computer system. 
For example, even authorized users may be restricted to the use of certain devices, 
programs, and data files. In addition, security programs monitor the use of computer 
networks and collect statistics on any attempts at improper use. They then produce 
reports to assist in maintaining the security of the network. 


Biometric security is a fast-growing area of computer security. These are security mea- 
sures provided by computer devices that measure physical traits that make each indi- 
vidual unique, such as voice verification, fingerprints, hand geometry, signature 
dynamics, keystroke analysis, retina scanning, face recognition, and genetic pattern 
analysis. Biometric control devices use special-purpose sensors to measure and digitize 
a biometric profile of a person’s fingerprints, voice, or other physical trait. The digitized 
signal is processed and compared to a previously processed profile of the individual 
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Evaluation of Biometric Techniques 


User Criteria System Criteria 
Tntrusiveness | Effort Accuracy Cost 

Dynamic signature 
verification Excellent Fair Fair Excellent 
Face geometry Good Good Fair Good 
Finger scan Fair Good Good Good 
Hand geometry Fair Good Fair Fair 
Passive iris scan Poor Excellent Excellent Poor 
Retina scan Poor Poor Very good Fair 
Voice print Very good Poor Fair Very good 


stored on magnetic disk. If the profiles match, the individual is allowed entry into a 
computer network and given access to secure system resources. See Figure 11.19. 

Notice that the examples of biometric security listed in Figure 11.19 are rated ac- 
cording to the degree of intrusiveness (how much the technique interrupts a user) and 
the relative amount of effort required by the user to authenticate. Also, the relative 
accuracy and cost of each are assessed. As you can see, trade-offs in these four areas 
exist in every example. Whereas face geometry is judged easy on the user in terms of 
intrusiveness and effort, its accuracy is not considered as high as that of other methods. 
Biometrics is still in its infancy, and many new technologies are being developed to 
improve on accuracy while minimizing user effort. 


“Sorry, our computer systems are down” is a well-known phrase to many end users. A variety 
of controls can prevent such computer failure or minimize its effects. Computer systems 
fail for several reasons—power failures, electronic circuitry malfunctions, telecommunica- 
tions network problems, hidden programming errors, computer viruses, computer opera- 
tor errors, and electronic vandalism. For example, computers are available with automatic 
and remote maintenance capabilities. Programs of preventive maintenance of hardware 
and management of software updates are commonplace. A backup computer system ca- 
pability can be arranged with disaster recovery organizations. Major hardware or software 
changes are usually carefully scheduled and implemented to avoid problems. Finally, 
highly trained data center personnel and the use of performance and security manage- 
ment software help keep a company’s computer system and networks working properly. 


Many firms also use fault-tolerant computer systems that have redundant processors, 
peripherals, and software that provide a fail-over capability to back up components in 
the event of system failure. This system may provide a fail-safe capability so that the 
computer system continues to operate at the same level even if there is a major hard- 
ware or software failure. Many fault-tolerant computer systems, however, offer a fail- 
soft capability so that the computer system can continue to operate at a reduced but 
acceptable level in the event of a major system failure. Figure 11.20 outlines some of 
the fault-tolerant capabilities used in many computer systems and networks. 


ETrade Financial Corp. and other online stock brokerages are at war over how fast they 
can execute a trade. ETrade has 3.5 million customer accounts and completes more than 
100,000 trades each day, on average. The company says most of its trades are completed 
in less than a second, a remarkable achievement for a complex operation that spans 
multiple computers, routers, and applications, not all of them controlled by ETrade. 

In 2001, the cost of proprietary systems was rising while the cost of open sys- 
tems running on Intel processors was falling, says Joshua S. Levine, E'Trade’s chief 
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FIGURE 11.20 
Methods of fault tolerance 
in computer-based 
information systems. 


technology and administrative officer. With the savings from open-source prod- 
ucts came the luxury of being able to overprovision by buying spare capacity for 
every conceivable hardware failure and spike in demand. “When you are buying 
servers so cheaply, the concept of ‘capacity’ drops away,” Levine says. “We buy a 
machine for $3,900, and we don’t even buy maintenance on it. When it fails, we 
throw it away.” 

Performance and reliability aren’t just about computer hardware and software: 
IT assets must be protected. That was one of the priorities when ETrade built its 
regional operations center (ROC) during the stock market boom of 1999. Speed was 
another. “Those were heady days for companies like ETrade,” says Greg Framke, an 
executive vice president and head of IT at ETrade. “Companies could barely keep up 
with demand. The ROC was built in less than 12 months.” 

ETrade’s main data center, the $70 million (excluding the computer gear) re- 
gional operations center, is an unmarked, windowless concrete fortress in Alpharetta, 
Georgia. The facility is classified as a “Tier [V—Fault Tolerant” data center, with 
two independent electrical systems, multiple power and cooling distribution paths, 
redundant components, and 99.995 percent availability. 

Six telecommunications carriers have pipes into the building, and there are three 
electrical feeds to the data center. Two rooms each houses a pair of 600-ton chillers, 
and a million-gallon tank of cold water can supply cooling if a chiller fails. The 
center has four enormous rooms housing uninterruptible power supply units, any 
one of which can fail with no operational impact. Two other rooms each houses a 
pair of redundant, 2-megawatt diesel generators. Nearby is a 220,000-gallon tank of 
diesel fuel, which is enough to power the data center for two weeks. Security is tight. 
There are closed-circuit television monitors, doors are equipped with badge readers, 
and a fingerprint-recognition system controls access to the computer room. 

Says Levine, “What I’m most proud of is that we operate at 100% every day, 
24 hours a day. And it’s out there for everyone to see if you have a failure. I mean, my 
career could end right now with a three-hour outage.” 


Source: Adapted from Gary Anthes, “Sidebar: Inside ETrade’s Data Center,” Computerworld, September 27, 2004; and 
Gary Anthes, “ETrade Beats the Clock,” Computerworld, September 27, 2004. 


Layer Threats Fault-Tolerant Methods 
Applications Environment, Application-specific redundancy and rollback 
hardware, and to previous checkpoint 
software faults 
Systems Outages System isolation, data security, system 
integrity 
Databases Data errors Separation of transactions and safe updates, 
complete transaction histories, backup files 
Networks ‘Transmission Reliable controllers; safe asynchrony and 
errors handshaking; alternative routing; 
error-detecting and error-correcting codes 
Processes Hardware and Alternative computations, rollback to 
software faults checkpoints 
Files Media errors Replication of critical data on different 


media and sites; archiving, backup, retrieval 


Processors Hardware faults Instruction retry; error-correcting codes in 
memory and processing; replication; 
multiple processors and memories 


Disaster Recovery 


System Control 
and Audits 


Information System 
Controls 


FIGURE 11.21 


Examples of information 
system controls. Note that 
they are designed to 
monitor and maintain the 
quality and security of the 
input, processing, output, 
and storage activities of an 
information system. 
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Natural and human-made disasters do happen. Hurricanes, earthquakes, fires, floods, 
criminal and terrorist acts, and human error can all severely damage an organization’s 
computing resources and thus the health of the organization itself. Many companies, 
especially online e-commerce retailers and wholesalers, airlines, banks, and Internet 
service providers, for example, are crippled by losing even a few hours of computing 
power. Many firms could survive only a few days without computing facilities. That’s 
why organizations develop disaster recovery procedures and formalize them in a disas- 
ter recovery plan. It specifies which employees will participate in disaster recovery and 
what their duties will be; what hardware, software, and facilities will be used; and the 
priority of applications that will be processed. Arrangements with other companies for 
use of alternative facilities as a disaster recovery site and off-site storage of an organi- 
zation’s databases are also part of an effective disaster recovery effort. 


‘Two final security management requirements that need to be mentioned are the devel- 
opment of information system controls and auditing business systems. Let’s take a 
brief look at these two security measures. 


Information system controls are methods and devices that attempt to ensure the ac- 
curacy, validity, and propriety of information system activities. Information system 
(IS) controls must be developed to ensure proper data entry, processing techniques, 
storage methods, and information output. Thus, IS controls are designed to monitor 
and maintain the quality and security of the input, processing, output, and storage 
activities of any information system. See Figure 11.21. 

For example, IS controls are needed to ensure the proper entry of data into a busi- 
ness system and thus avoid the garbage in, garbage out (GIGO) syndrome. Examples 
include passwords and other security codes, formatted data entry screens, and audible 
error signals. Computer software can include instructions to identify incorrect, invalid, 
or improper input data as it enters the computer system. For example, a data entry pro- 
gram can check for invalid codes, data fields, and transactions, and conduct “reasonable- 
ness checks” to determine if input data exceed specified limits or are out of sequence. 


Processing 
Controls 


Input 
Controls 


Output 
Controls 


Software Controls 
Hardware Controls 


rl 


Security Codes 
Encryption 
Data Entry Screens 
Error Signals 
Control Totals 


Security Codes 
Encryption 
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FIGURE 11.22 


How to protect yourself 
from cyber crime and other 
computer security threats. 


Auditing IT Security 


Security Management for Internet Users 


1. Use antivirus and firewall software 6. Use the most up-to-date version of 
and update it often to keep your Web browser, e-mail software, 
destructive programs off your and other programs. 
computer 7. Send credit card numbers only to 

2. Don’t allow online merchants to secure sites; look for a padlock or key 
store your credit card information icons at the bottom of the browser. 
for future purchases. 8. Use a security program that gives 

3. Use a hard-to-guess password that you control over “cookies” that send 
contains a mix of numbers and information back to Web sites. 
letters, and change it frequently. 9. Install firewall software to screen 

4. Use different passwords for different traffic if you use DSL or a cable 
Web sites and applications to keep modem to connect to the Net. 
hackers guessing. 10. Don’t open e-mail attachments 

5. Install all operating system patches unless you know the source of the 
and upgrades. incoming message. 


IT security management should be periodically examined, or audited, by a company’s 
internal auditing staff or external auditors from professional accounting firms. Such 
audits review and evaluate whether proper and adequate security measures and man- 
agement policies have been developed and implemented. This process typically in- 
volves verifying the accuracy and integrity of the software used, as well as the input of 
data and output produced by business applications. Some firms employ special com- 
puter security auditors for this assignment. They may use special test data to check 
processing accuracy and the control procedures built into the software. The auditors 
may develop special test programs or use audit software packages. 

Another important objective of business system audits is testing the integrity of an 
application’s audit trail. An audit trail can be defined as the presence of documentation 
that allows a transaction to be traced through all stages of its information processing. 
This journey may begin with a transaction’s appearance on a source document and end 
with its transformation into information in a final output document or report. The 
audit trail of manual information systems is quite visible and easy to trace. However, 
computer-based information systems have changed the form of the audit trail. Now 
auditors must know how to search electronically through disk and tape files of past 
activity to follow the audit trail of today’s networked computer systems. 

Many times, this electronic audit trail takes the form of control logs that automatically 
record all computer network activity on magnetic disk or tape devices. This audit fea- 
ture can be found on many online transaction processing systems, performance and 
security monitors, operating systems, and network control programs. Software that 
records all network activity is also widely used on the Internet, especially the World 
Wide Web, as well as on corporate intranets and extranets. Such an audit trail helps 
auditors check for errors or fraud, but also helps IS security specialists trace and evalu- 
ate the trail of hacker attacks on computer networks. 

Figure 11.22 summarizes 10 security management steps you can take to protect 
your computer system resources from hacking and other forms of cyber crime. 


e Ethical and Societal Dimensions. The vital role of privacy, health, and computer crime, as illustrated in 
information technologies and systems in society raises Figure 11.2. 
serious ethical and societal issues in terms of their im- Employment issues include the loss of jobs—a result 


pact on employment, individuality, working conditions, of computerization and automation of work—versus the 


jobs created to supply and support new information 
technologies and the business applications they make 
possible. The impact on working conditions involves 
the issues of computer monitoring of employees and 
the quality of the working conditions of the jobs that 
use information technologies heavily. The effect of IT 
on individuality addresses the issues of the depersonali- 
zation, regimentation, and inflexibility of some compu- 
terized business systems. 

Employees’ heavy use of computer workstations 
for long periods raises issues about and may cause 
work-related health disorders. The use of IT to ac- 
cess or collect private information without authori- 
zation, as well as for computer profiling, computer 
matching, computer monitoring, and computer libel 
and censorship, raises serious privacy issues. Compu- 
ter crime issues surround activities such as hacking, 
computer viruses and worms, cyber theft, unauthor- 
ized use at work, software piracy, and piracy of intel- 
lectual property. 

Managers, business professionals, and IS special- 
ists can help solve the problems of improper use of 
IT by assuming their ethical responsibilities for the 
ergonomic design, beneficial use, and enlightened 
management of information technologies in our 
society. 
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Ethical Responsibility in Business. Business and IT 
activities involve many ethical considerations. Basic 
principles of technology and business ethics can serve as 
guidelines for business professionals when dealing with 
ethical business issues that may arise in the widespread 
use of information technology in business and society. 
Examples include theories of corporate social responsi- 
bility, which outline the ethical responsibility of man- 
agement and employees to a company’s stockholders, 
stakeholders, and society, and the four principles of 
technology ethics summarized in Figure 11.4. 


Security Management. One of the most important 
responsibilities of the management of a company is to 
ensure the security and quality of its T-enabled business 
activities. Security management tools and policies can 
ensure the accuracy, integrity, and safety of the informa- 
tion systems and resources of a company and thus mini- 
mize errors, fraud, and security losses in its business 
activities. Examples mentioned in the chapter include the 
use of encryption of confidential business data, firewalls, 
e-mail monitoring, antivirus software, security codes, 
backup files, security monitors, biometric security mea- 
sures, computer failure controls, fault-tolerant systems, 
disaster recovery measures, information system controls, 
and security audits of business systems. 


Key Terms and Concepts 


These are the key terms and concepts of this chapter. The page number of their first explanation is in parentheses. 
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= 
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. Antivirus software (490) 11. Disaster recovery (495) 21. Intellectual property theft (467) 
. Audit trail (496) 12. Distributed denial of service (487) 22. Opt-in/Opt-out (472) 

. Backup files (491) 13. Encryption (485) 23. Passwords (491) 

. Biometric security (492) 14. Ergonomics (479) 24. Security management (481) 

. Business ethics (454) 15. Ethical foundations (454) 25. Societal solutions (479) 

. Computer crime (460) 16. Fault tolerant (493) 26. Software piracy (466) 

. Computer matching (474) 17. Firewall (486) 27. Spamming (476) 

. Computer monitoring (477) 18. Flaming (476) 28. Spyware/Adware (470) 

. Computer virus (468) 19. Hacking (461) 29. System security monitor (492) 

. Cyber law (476) 20. Information system controls (495) 30. Unauthorized use (465) 


Review Quiz 


Match one of the key terms and concepts listed previously with one of the brief examples or definitions that follow. Try to find 
the best fit for the answers that seem to fit more than one term or concept. Defend your choices. 


—— 1. Ensuring the accuracy, integrity, and safety of 


business/IT activities and resources. 


—— 2. Control totals, error signals, backup files, and 


security codes are examples. 


—— 3. Software that can control access and use of a com- 


puter system. 


—— 4. Acomputer system can continue to operate 


even after a major system failure if it has this 
capability. 


—— 5.Acomputer system that serves as a filter for access 


to and from other networks by a company’s net- 
worked computers. 
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—— 6. Laws and regulations focused on issues related 


to the Internet and other forms of networked 
communications. 


7. The presence of documentation that allows a 
transaction to be traced through all stages of 
information processing. 


—— 8. Using your voice or fingerprints to identify your- 


self electronically. 


—— 9. Aplan to continue IS operations during an 


emergency. 


—— 10. Scrambling data during its transmission. 


—— 11. Ethical choices may result from decision-making 


processes, cultural values, or behavioral stages. 


—— 12. Managers must confront numerous ethical ques- 


tions in their businesses. 


—— 13. Sending unsolicited e-mail indiscriminately. 


—— 14. Software that can infect a machine and transmit 


private information back to its owner. 


___ 15. Two different perspectives on the use of private 


information. 


—_— 16. Using computers to identify individuals that fit a 


certain profile. 


— 17. Using computers to monitor the activities of workers. 


—— 18. Overwhelming a Web site with requests for service 


from captive computers. 


___— 19. Using computers and networks to steal money, 


services, software, or data. 


—— 20. Using company computers to access the Internet 


during work hours for personal business. 


—— 21. Unauthorized copying of software. 


____ 22. Unauthorized copying of copyrighted material. 


—— 23. Electronic breaking and entering into a computer 


system. 


—— 24. A program that makes copies of itself and destroys 


data and programs. 


____ 25. Finds and eliminates computer viruses. 


___ 26. Sending extremely critical, derogatory, and vulgar 


e-mail messages. 


—— 27. Designing computer hardware, software, and 


workstations that are safe, comfortable, and easy 
to use. 


——— 28. Applications of information technology that have 


beneficial effects for society at large. 


—— 29. Duplicate files of programs or data that are 


periodically copied and stored elsewhere in 
case the original is damaged and needs to be 
restored. 


—— 30. A piece of data, known only to an authorized user, 


that is used to gain access to a system. 


Discussion Questions 


. What can be done to improve the security of business 
uses of the Internet? Give several examples of security 
measures and technologies you would use. 


. What potential security problems do you see in the 
increasing use of intranets and extranets in business? 
What might be done to solve such problems? Give 
several examples. 


. Refer to the Real World example about copying CDs 
and music downloading in the chapter. Is copying music 
CDs an ethical practice? How about Internet music 
downloading? Explain. 


. What are your major concerns about computer crime 
and privacy on the Internet? What can you do about it? 
Explain. 


. What is disaster recovery? How could it be imple- 
mented at your school or work? 


. Refer to the Real World Case on ethics and moral di- 
lemmas in the case. Although John Mackey’s actions 
may be debatable from an ethical standpoint, they were 
likely not illegal. Is it inappropriate for an employee to 
blog or emit opinions about his or her own company or 


10. 


its competitors? Why or why not? What if it had been 
an analyst, as opposed to the CEO? 


. Is there an ethical crisis in business today? What role 


does information technology play in unethical business 
practices? 


. What are several business decisions that you will have 


to make as a manager that have both ethical and IT 
dimensions? Give examples to illustrate your answer. 


. Refer to the Real World Case on outbound content 


management in the chapter. The case notes that al- 
though companies in highly regulated industries can 
more easily justify their investment in these technolo- 
gies, others may have some challenges in doing this. 
How can these companies present a business case for 
acquiring or developing these technologies? What 
factors would need to be taken into account? Provide 
several examples. 


What would be examples of one positive and one nega- 
tive effect of the use of information technologies in 
each of the ethical and societal dimensions illustrated in 
Figure 11.2? Explain several of your choices. 
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FI G URE 11 . 2 3 SuperKnout Rules Administrator 
Network monitoring Eile View Rule Object Tools Help 
software (sniffers) are Ie cjEX+ viS] 


used to monitor the Type | Who | Where | When | Notify | Comment 

@ isaLtow anniew Adult / Sexually Explicit ANYTIME NOBODY No pornography -- corp Internet Access Policy 
@visaLtow anniew Gambling, Streaming Media ANYTIME NOBODY No online gambling -- corp Internet Access Policy 
@ visattow parist Arts & Entertainment. Video files Work Hours NOBODY No MP3 downloads till after work is done! 


use of the Internet by 
employees at work. They 
can also block access to 
unauthorized Web sites. 


KU 


(®B, Who G where | @ when | =] Notity | 


fa Monitored Sites 
Ef User Defined Where Objects 
: Hosts and Domains 
MAC Addresses 
 Subnets 
a, Protocols/Ports 


3 Where Lists 


Display objects which contain: 


Name 


(3) Audio files 
[$] Executables 
E] Images 

[$] Text files 
3) Video files 


Source: Courtesy of Aptara. 


Analysis Exercises e 


1. Problems with Passwords 


Authentication 

Network and application managers need to know who is 
accessing their systems to determine appropriate access 
levels. Typically, they require that users create secret 
passwords. A secret password, known only to the user, 
allows an administrator to feel confident that a user is 
who the user says he or she is. Systems administrators 
even have the authority to determine the characteristics 
of passwords. For example, they may set a minimum 
length and require that a password include numbers, 
symbols, or mixed letter case. They may also require 
that a user change his or her password every few weeks 
or months. These approaches have numerous problems: 


e Users often forget complicated or frequently 
changing passwords, resulting in frequent calls to a 
help desk. The help-desk employee then faces the 
burden of identifying the employee by some other 
means and resetting the password. This process 
takes time and is subject to social engineering. 


e Users may write down their passwords. However, 
this leaves passwords subject to discovery and theft. 


e Users often pick the same password for many 
different accounts, which means that someone who 
discovers one of these passwords then has the 
“keys” to all the accounts. 


e@ Users may pick an easy-to-remember password, 
which is easy to anticipate and therefore easy to 
guess. Password-cracking programs cycle through 
entire dictionaries of English language words and 
common word/number combinations such as 
“smartl” or “2smart4U.” 


e Users may give away their passwords over the 
phone (social engineering) or via e-mail (phishing, 
a type of social engineering) to individuals 
representing themselves as a system administrator. 
Perhaps you have already received e-mails 
purportedly from a financial institution claiming 
identity or account difficulties and asking you to 
“reconfirm” your account information on their 
authentic-looking Web site. 


As you can see, using passwords to identify a person 
is fraught with problems. Here are some alternatives to 
explore. Look up each authentication approach listed 
below on the Internet, describe the method in your own 
words (be sure to cite your sources), and briefly list the 
advantages and disadvantages. 


a. Biometrics (biological measuring) 
b. Smart cards 
c. Biochips 


2. Your Internet Job Rights 
Three Ethical Scenarios 
Whether you’re an employer or an employee, you 
should know what your rights are when it comes to In- 
ternet use in the workplace. Mark Grossman, a Florida 
attorney who specializes in computer and Internet law, 
gives answers to some basic questions. 


e Scenario 1: Nobody told you that your Internet 
use in the office was being monitored. Now you’ve 
been warned you'll be fired if you use the Internet for 
recreational surfing again. What are your rights? 
Bottom line: When you're using your office 
computer, you essentially have no rights. You’d have 
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a tough time convincing a court that the boss in- 
vaded your privacy by monitoring your use of the 
company PC on company time. You should proba- 
bly be grateful you got a warning. 


e Scenario 2: Your employees are abusing their 
Internet privileges, but you don’t have an Internet 
usage policy. What do you do? 

Bottom line: Although the law isn’t fully devel- 
oped in this area, courts are taking a straightfor- 
ward approach: If it’s a company computer, the 
company can control the way it’s used. You don’t 
need an Internet usage policy to prevent inappro- 
priate use of your company computers. To protect 
yourself in the future, distribute an Internet policy 
to your employees as soon as possible. 


e Scenario 3: Employee John Doe downloads adult 
material to his PC at work, and employee Jane 
Smith sees it. Smith then proceeds to sue the 
company for sexual harassment. As the employer, 
are you liable? 

Bottom line: Whether it comes from the Internet 
or from a magazine, adult material has no place in 
the office. So Smith could certainly sue the company 
for allowing a sexually hostile environment. The best 
defense is for the company to have an Internet usage 
policy that prohibits visits to adult sites. Of course, 
you have to follow through. If someone is looking at 
adult material in the office, you must at least send the 
offending employee a written reprimand. If the com- 
pany lacks a strict Internet policy, though, Smith 
could prevail in court. 

a. Do you agree with the advice of attorney Mark 

Grossman in each of the scenarios? Why or why not? 

b. What would your advice be? Explain your positions. 


c. Identify any ethical principles you may be using to 
explain your position in each of the scenarios. 


3. Exploiting Security Weaknesses 


Social Engineering 

An employee who needs permission to access an 
electronic workspace, database, or other information 
systems resource typically fills in a request form and 
obtains approval from the responsible manager. The 
manager then routes the request to one of the system’s 
administrators. 

Highly trusted and well-trained systems administra- 
tors spend a significant amount of time doing nothing 
more technical than adding or removing names from 
access control lists. In large organizations, it’s not un- 
usual for systems administrators to have never met any 
of the people involved in a specific request. The admin- 
istrators may not even work in the same office. 

Hackers have learned to take advantage of this ap- 
proach to access authorization. They begin by probing 
an organization. The hacker doesn’t expect to compro- 
mise the system during this initial probe. He or she just 
starts by making a few phone calls to learn who is re- 
sponsible for granting access and how to apply. A little 


more probing helps the hacker learn who’s who within 
the organization’s structure. Some organizations even 
post this information online in the form of employee 
directories. With this information in hand, the hacker 
knows whom to talk to, what to ask for, and what names 
to use to sound convincing. The hacker is now ready to 
try to impersonate an employee and trick a systems ad- 
ministrator into revealing a password and unwittingly 
granting unauthorized access. 

Organizations determine who needs access to which 
applications. They also need a system through which 
they can authenticate the identity of an individual mak- 
ing a request. Finally, they need to manage this process 
both effectively and inexpensively. 


a. Describe the business problems that this exercise 
presents. 

b. Suggest several ways to reduce an organization’s 
exposure to social engineering. 

c. Prepare an orientation memo to new hires in your 
IT department describing “social engineering.” 
Suggest several ways employees can avoid being 
tricked by hackers. 


. Privacy Statements 


The Spyware Problem 

Web surfers may feel anonymous as they use the 
Internet, but that feeling isn’t always justified. IP ad- 
dresses, cookies, site log-in procedures, and credit card 
purchases all help track how often users visit a site and 
what pages they view. Some companies go further. 

Some free screensaver software and peer-to-peer 
file sharing come with “spyware” embedded within 
their applications. Once loaded, these applications run 
in the background. What they actually track depends 
on the specific software. To stay on the “right side” of 
U.S. law, these companies outline their software’s func- 
tions in general terms and include this information in 
the small print within their end-user licensing agree- 
ment (EULA) and/or privacy policy. In fact, these 
agreements may even include a stipulation that users 
not disable any part of their software as a condition for 
free use. 

Because most users don’t read these policies, they 
have no idea what privacy rights they may have given 
up. They indeed get their free file-sharing program or 
screen saver, but they may be getting a lot more. Some 
spyware programs even remain on hard drives and 
stay active after users have uninstalled their “free” 
software. 


0 66 


a. Use a search engine to search for “spyware,” “spy- 
ware removal,” “adware,” or other related terms. 
Prepare a one-page summary of your results. 
Include URLs for online sources. 

b. Select three of your favorite Web sites and print out 
their privacy policies. What do they share in com- 
mon? How do they differ? 

c. Write your own Web site privacy policy, striking a 
balance between customer and business needs. 


REAL WORLD 
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Cyber Scams: Four Top Cyber 


Criminals—Who They Are and 
What They Do 


yber scams are today’s fastest-growing criminal 

niche. Scores of banks and e-commerce giants, 

from JPMorgan Chase & Co. to Wal-Mart.com, 
have been hit, sometimes repeatedly, by hackers and online 
fraud schemes. The 2005 FBI Computer Crime Survey esti- 
mated annual losses to all types of computer crime—including 
attacks of viruses and other malware, financial fraud, and 
network intrusions—at $67 billion a year. Of the 2,066 com- 
panies responding to the survey, 87 percent reported a secu- 
rity incident. In addition, the U.S. Federal Trade Commission 
says identity theft is its top complaint. 

‘To track cyber crime, law enforcement officers work with 
companies such as eBay or Microsoft, as well as with legal au- 
thorities around the globe. eBay has 60 people that combat 
fraud, while Microsoft’s Internet Safety Enforcement team has 
65 operatives, including former law enforcement agents and 
federal prosecutors. To document the extent of the activity, 
BusinessWeek reporters scoured underground Web sites where 
stolen data are swapped like so many baseball cards on eBay. 

Consider this e-mail promoting the launch of an online 
crime trading bazaar, vendorsname.ws, last year: “During the 
battle with US Secret Service, we !@# &! all those bastards 
and now are running a brand new, improved and the biggest 
carders’ forum you ever seen.” The message brags about its 
array of stolen goods: U.S. and European credit card data, 
“active and wealthy” PayPal accounts, and Social Security 
numbers. Those who “register today” get a “bonus” choice of 
“one Citybank account with online access with 3K on board” 
or “25 credit cards with PINs for online carding.” 

What follows is a look at four individuals who have 
been identified by multiple law enforcement authorities as 
high-priority targets in their investigations. It’s no coinci- 
dence that all are Russian. Strong technical universities, 
comparatively low incomes, and an unstable legal system 
make the former Soviet Union an ideal breeding ground 
for cyber scams. Also, tense political relations sometimes 
complicate efforts to obtain cooperation with local law en- 
forcement. “The low standard of living and high savviness 
is a bad combination,” argues Robert C. Chesnut, a former 
federal prosecutor who is a senior vice president directing 
antifraud efforts at eBay. 

Among the most pernicious scams to emerge in the last 
few years are so-called reshipping rings. The king of these rings 
is a Russian-born hacker who goes by the name Shtirlitz—a 
sly reference to a fictional Soviet secret agent who spied on 
the Nazis. In real life, Shtirlitz is being investigated by the 
U.S. Postal Inspection Service in connection with tens of 
millions of dollars’ worth of fraud in which Americans 
signed up to serve as unwitting collaborators in converting 
stolen credit card data into tangible goods that can be sold 
for cash. “We think he is involved in the recruitment of 
hundreds of people,” says William A. Schambura, an analyst 
with the U.S. Postal Inspection Service. 


Investigators believe that people like Shtirlitz use stolen 
credit cards to purchase goods they send to Americans whose 
homes serve as drop-off points. The Americans send the 
goods overseas, before either the credit card owner or the 
online merchant catches on. Then the goods are fenced on 
the black market. 

BusinessWeek found that reshipping groups take out ad- 
vertisements in newspapers and spoof ads from online job 
sites. “We have a promotional job offer for you!!” beckons 
one e-mail for a “shipping-receiving position” from UHM 
Cargo that appeared to come from Monster.com. It states 
that “starting salary is $70-$80 per processed shipment. 
Health and life benefits after 90 days.” 

Officials do not know Shtirlitz’s real name but believe he 
is 25-27 years old and lived in the San Francisco area at one 
time after his parents emigrated. They do not know where 
he is now but believe he is active. In one forum of Carding- 
World.cc, a person with the alias iNFERNis, posted this re- 
quest on December 23, 2005: “Hi, I need eBay logins with 
mail access, please icq 271-365-234.” A few hours later, 
Shtirlitz replied: “I know good vendor. ICQ me: 80-911.” 

Once equipped, someone could log into those eBay ac- 
counts and use them to buy goods with the owners’ money 
while emptying the money out of their PayPal accounts. 
“The Web sites are more like a dating service,” notes Yohai 
Einav, an analyst at RSA Security Inc. “Then you can con- 
duct transactions in private chat rooms. I can click on some- 
one’s name and start doing business with them.” 

‘The technical tools to steal credit card numbers and on- 
line bank account log-in data are often just as valuable as the 
stolen goods themselves. A cyber criminal known as Smash 
is being investigated by the Postal Inspection Service on the 
suspicion that he helps hackers hack. The picture, or avatar, 
that accompanies Smash’s posts in online chat rooms shows 
a fallen angel. Around 25-30 years old and based in Moscow, 
he is believed to be an expert in building spyware programs, 
malicious code that can track Web surfers’ keystrokes and is 
often hidden in corrupted Web sites and spam e-mail. 

The U.S. enforcement officials say Smash’s Russia-based 
company, RAT Systems, openly hawks spyware on the Web at 
www.ratsystems.org. On its home page, RAT Systems denies 
any malicious intent: “In general, we’re against destructive 
payloads and the spreading of viruses. Coding spyware is not a 
crime.” Yet the “terms of service” guarantee that its spyware 
products will be undetectable by the antivirus software made 
by security companies such as McAfee Inc. and Symantec 
Corp. One product, called the TAN Systems Security Leak, 
created to attack German companies, sells for $834. 

Postal Inspection Service officials are also investigating 
Smash’s activity as a senior member of the International Asso- 
ciation for the Advancement of Criminal Activity, which they 
describe as a loose-knit network of hackers, identity thieves, 
and financial fraudsters. Smash and another sought-after 
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hacker named Zoomer jointly operate [AAcA’s Web site, www. 
theftservices.com, one of the most popular and virulent stolen- 
data trading sites, according to U.S. officials. 

On May 11, 2005, Massachusetts Attorney General Tom 
Reilly filed a lawsuit against Leo Kuvayev and six accom- 
plices, accusing them of sending millions of spam e-mails to 
peddle counterfeit drugs, pirated software, fake watches, and 
pornography. Kuvayev, a 34-year-old native of Russia who 
uses the nickname BadCow, is one of the world’s top three 
spammers, according to antispam group Spamhaus. State of- 
ficials allege that Kuvayev and his associates used a number 
of Web-hosting services from the United States and around 
the world to launch attacks. 

Massachusetts was able to go after Kuvayev because he 
listed a Massachusetts address on his driver’s license and 
conducted business using a Boston post office box. On Octo- 
ber 11, 2005, after none of the defendants appeared to answer 
the charges, a Superior Court judge issued a default judg- 
ment against them. The judge found the spammers in viola- 
tion of state and federal consumer protection laws and 
ordered a permanent shutdown of dozens of illegal Web sites. 
Kuvayev and his codefendants were ordered to pay $37 million 
in civil penalties for sending nearly 150,000 illegal e-mails. 

Federal law enforcement officials believe Kuvayev’s op- 
eration was pulling in more than $30 million a year. State 
officials suspect Kuvayev fled to Russia before he was sued. 
“The problem is, Russia does not have any anti-spamming 
laws at the moment,” says U.S. Postal Inspection Service 
senior investigator Gregory Crabb. “It’s hard to catch some- 
one who isn’t breaking the law.” 


CASE STUDY QUESTIONS 


1. List several reasons “cyber scams are today’s fastest- 
rowing criminal niche.” Explain why the reasons you 
g gl xp y y 
give contribute to the growth of cyber scams. 


2. What are several security measures that could be imple- 
mented to combat the spread of cyber scams? Explain 
why your suggestions would be effective. 


3. Which of the four top cyber criminals described in this 
case poses the biggest threat to businesses? To consum- 
ers? Explain the reasons for your choices, and describe 
how businesses and consumers can protect themselves 
from these cyber scammers. 


Bank robbers rob banks because that’s where the money 
is. For cyber criminals, the best loot is often found inside 
the networks of credit card processors, the middlemen that 
handle card transactions for merchants and banks. Postal 
Inspection Service officials say they are investigating Roman 
Khoda, aka MyO, on the strong suspicion that he is con- 
nected to the theft of a million credit card numbers in 
recent years. 

A 26-year-old Russian with a university degree in phys- 
ics, Khoda once worked with the leading members of card- 
erplanet, one of the largest online marketplaces used to buy 
and sell pilfered bank account and card data, until it was bro- 
ken up by U.S. and foreign officials in August 2004. Yet 
Khoda is unlike some cocky hackers who often write their 
own digital signatures into malicious code, says Crabb; 
Khoda operates with stealth. At carderplanet and successor 
Web sites, he has not left a detailed trail connecting him di- 
rectly to stolen data. 

Still, Crabb says that officials know that Khoda and two 
accomplices conducted extensive due diligence on the com- 
puter networks of recent targets they intended to break 
into, even setting up fake companies with accounts at the 
credit card processors to test for holes in their systems. 
Then they lugged PCs to a rented apartment on the Medi- 
terranean island of Malta, according to Crabb. Using proxy 
servers in the United States, China, and Ukraine to hide 
their Internet connection, Khoda & Co. then unleashed 
their break-in attacks. 


Source: Adapted from Spencer Ante and Brian Grow, “Meet the Hackers,” 
BusinessWeek, May 29, 2006. 


REAL WORLD ACTIVITIES 


1. Note: It is not advisable to visit any of the cyber scam 
Web sites mentioned in this case or any others you dis- 
cover. Io do so could make you, your computer, and 
your network vulnerable to various forms of cyber 
crime. Search other sites on the Internet for the latest 
information on cyber scams, the cyber criminals men- 
tioned in this case, and ways to combat cyber scams. 
What are some of the new developments you find in 
each of these areas? 


2. How can you protect yourself from cyber scams and 
other forms of cyber crime? Break into small groups 
with your classmates to discuss this issue and formulate 
some key protective recommendations. Include all 
forms of cyber crime mentioned in this case in your 
recommendations, as well as those you uncover in your 
Internet research. 
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Global Business/IT Strategies 

Global Business/IT Applications 

Global IT Platforms 

Global Data Access Issues 

Global Systems Development 


. Identify each of the three components of IT 


management and use examples to illustrate how 
they might be implemented in a business. 


. Explain how failures in IT management can be 


reduced by the involvement of business managers 
in IT planning and management. 


. Identify several cultural, political, and geoeco- 


nomic challenges that confront managers in the 
management of global information technologies. 


. Explain the effect on global business/IT strategy 


of the trend toward a transnational business 
strategy by international business organizations. 


. Identify several considerations that affect the 


choice of IT applications, IT platforms, data access 
policies, and systems development methods by a 
global business enterprise. 


. Understand the fundamental concepts of out- 


sourcing and offshoring, as well as the primary 
reasons for selecting such an approach to IS/IT 
management. 


Real World Case: IBM Corporation: Competing Globally 
by Offshoring IT Workers and Giving Away Technology 
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SECTION I 


Business 
and IT 


Managing 
Information 
Technology 


Managing Information 
Technology 


The strategic and operational importance of information technology in business is no 
longer questioned. As the 21st century unfolds, many companies throughout the world 
are intent on transforming themselves into global business powerhouses through major 
investments in global e-business, e-commerce, and other IT initiatives. Thus, there is 
a real need for business managers and professionals to understand how to manage this 
vital organizational function. In this section, we explore how the IS function can be 
organized and managed, and we emphasize the importance of a customer and business 
value focus for the management of information technologies. Whether you plan to be 
an entrepreneur and run your own business, a manager in a corporation, or a business 
professional, managing information systems and technologies will be one of your major 
responsibilities. See Figure 12.1. 

Read the Real World Case on the next page. We can learn a lot from this case 
about the many challenges faced by retiring IT executives and different approaches to 
mentoring and developing the IT leaders of the future. 


As we have seen throughout this text, information technology is an essential compo- 
nent of business success for companies today; however, information technology is also 
a vital business resource that must be properly managed. Thus, we have also seen 
many real world examples in which the management of information technologies plays 
a pivotal role in ensuring the success or contributing to the failure of a company’s 
strategic business initiatives. Therefore, managing the information systems and tech- 
nologies that support the modern business processes of companies today is a major 
challenge for both business and IT managers and professionals. 

How should information technology be managed? Figure 12.2 illustrates one popu- 
lar approach to managing information technology ina large company. This managerial 
approach has three major components: 


e Managing the Joint Development and Implementation of Business/IT 
Strategies. Led by the CEO (chief executive officer) and CIO (chief infor- 
mation officer), proposals are developed by business and IT managers and 
professionals regarding the use of IT to support the strategic business priori- 
ties of the company. This business/IT planning process aligns IT with strategic 
business goals. The process also includes evaluating the business case for in- 
vesting in the development and implementation of each proposed business/ 

IT project. 

e Managing the Development and Implementation of New Business/IT Ap- 
plications and Technologies. This step is the primary responsibility of the CIO 
and CTO (chief technology officer). This area of IT management involves man- 
aging the processes for information systems development and implementation we 
discussed in Chapter 12, as well as the responsibility for research into the strate- 
gic business uses of new information technologies. 


e Managing the IT Organization and the IT Infrastructure. The CIO 
and IT managers share responsibility for managing the work of IT profes- 
sionals who are typically organized into a variety of project teams and other 
organizational subunits. In addition, they are responsible for managing the 
IT infrastructure of hardware, software, databases, telecommunications net- 
works, and other IT resources, which must be acquired, operated, monitored, 
and maintained. 


Let’s look at a real-world example. 


Toyota, Procter & Gamble, 


REAL WORLD 


arbra Cooper started as a CIO when the position was 
still called “VP of IS.” In her more than 30 years in 
IT, she’s seen the role become ever more strategic. 
Until now, the CIO is in the unique position of being 
the C-level officer who can “see across the entire enterprise.” 

As the CIO for Toyota Motor Sales USA, Cooper thinks 
tomorrow’s CIOs will be even more strategic and influential, 
but she also worries about the future business and technol- 
ogy changes they face. “The next 10 to 20 years are going to 
be challenging,” she says. As she talks about the challenges 
that lie ahead, the question arises: Where will the IT leaders 
come from to tackle them? 

It’s a question more and more IT executives are asking 
themselves. CIOs are moving up and out. The first full-career 
CIO generation is beginning to retire. Others are increas- 
ingly taking on broader responsibilities or moving out of 
IT and into other business leadership roles as the position 
evolves beyond its technology roots. In fact, CIO’s 2008 State 
of the CIO report found that 56 percent of CIOs surveyed say 
long-term strategic thinking and planning is the executive 
leadership skill most critical in their current role, followed 
by collaboration and influence (47 percent) and expertise 
running IT (39 percent). At the same time, many CIOs don’t 
know who would lead IT if they left tomorrow. When you 
consider that just 17 percent of respondents to the State of 
the CIO survey cited people development as a critical leader- 
ship competency, that’s not surprising. 

The skills to be CIO have also changed as the role has 
shifted from technologist to business strategist. It used to be 
that “we could afford to let the business tell us what they 
wanted us to do, be good at delivering it and keep our 


FIGURE 12.1 


Developing and mentoring their successors is one of 
the key responsibilities of IT leaders in an environment 
that includes the changing role of the ClO and a 
shortage of qualified managers. 


Source: ©Digital Vision/Getty Images. 


Hess Corporation, and Others: 
Retiring ClOs and the Need for 
Succession Planning 


jobs,” says Cooper. “Now, the physics and velocity of busi- 
ness and its demands mean you can’t afford to wait until 
something happens.” 

Indeed, CEOs now look to the CIO to act more as a stra- 
tegic business leader and less as a function head. TAC World- 
wide CEO Robert Badavas says he seldom speaks about 
technology with his CIO; instead, the two talk about “shaping 
the business value to our clients,” he says. To be successful, he 
notes, the CIO needs to understand the value proposition 
of the business. “By staying in the silo of technology, HR, ac- 
counting or any other,” says Badavas, “you’re not going to be 
as valuable to the business.” Or to the CEO. 

With all that in mind, CIOs today must groom not 
only competent replacements for themselves but also next- 
generation IT leaders who are “business ready” and able to 
succeed in a more [T-intense and integral business environ- 
ment. The shift in business expectations means that CIOs 
have better job security than in the past. It also takes longer 
to find good ones with the right mix of business and techni- 
cal know-how. For example, Pete Walton is in his second 
stint as CIO at Hess Corp. The petroleum products com- 
pany coaxed him out of retirement in 2005 when its CIO 
at that time left. Hess wanted someone who could take its 
Information Services “to the next level,” says Walton. 

“CEOs want someone who’s business savvy and can figure 
out how you can use technology for the business. Trying to 
find that hybrid person is hard,” says Diane S. Wallace, CIO 
for the state of Connecticut. It will only get harder to find 
them, just for demographic reasons. “We have this triple threat 
of labor shortage: The Boomers are retiring, young people are 
not going into IT and fewer people are getting degrees,” says 
Robert D. Scott, who in February retired as Procter & Gam- 
ble’s vice president of Global Business Services. Scott says he 
noticed a drop in IT interest during the technology bubble of 
the late 1990s. Then the rush to outsourcing created a cloud 
around U.S. IT jobs. That pall persists despite strong job 
growth in IT, which is expected to add more than 200,000 jobs 
by 2016, according to the Bureau of Labor Statistics. 

Procter & Gamble (P&G) is a case in point. It out- 
sourced about half of its IT staff in 2003, but IT employ- 
ment is now back to the level it was five years ago. Scott says 
that this is because the company outsourced its commodity 
IT, and “internal IT moved up the food chain, and is creat- 
ing more and more business value.” 

Scott says P&G continues to attract strong candidates 
for IT jobs, but the hiring pool is not as deep as in years past. 
Plus, P&G believes strongly in promoting people steeped in 
its culture. It worries about keeping its Generation Y em- 
ployees. The triple threat is already creating an IT brain 
drain. Wallace says 40 percent of her staff of 518 will be eli- 
gible for retirement in the next two to three years. Barbara 
A. White, CIO and associate provost at the University of 
Georgia, says that when three staff members retired in April, 
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she lost their combined 90 years of experience, and has a lot 
of staff likely to retire in the next 10 years. 

‘Toyota’s Cooper is dedicating time to prepare her organ- 
ization for the future, which includes being as proactive as 
possible and staying ahead of the business needs. It also 
means a commitment to active succession planning. Two 
years ago, Cooper sat down for 90 minutes with 27 team 
members who reported either directly to her or directly to 
another team member. Each meeting was an open coaching 
session structured around her ideas of what IT leaders will 
need to be in 10 years. She then crafted a three- to four-page 
letter for each team member, detailing the capabilities she 
wanted them to develop and a plan for showing how they 
were achieving them. Those who reported directly to her re- 
ceived a summary of what she sent to their team members. 

Procter & Gamble has a corporate culture that promotes 
from within. It saw, however, that good technical talent was get- 
ting harder to keep, and it also understood that Gen Y employ- 
ees expect to change companies frequently. To combat both 
challenges, it blazed a new, faster IT career path for its younger 
workers. IT leadership adopted an accelerated development 
program, as a part of the career path, says Scott. It would place 
a new set of top performers in a Career Executive Development 
Program, designed to provide them exposure to high-level IT 
executives and assignments to help accelerate their growth. It 
comes with one caveat: If you don’t perform, you'll be looking 
for another employer. It’s a modified version of what's in place 
in the company’s fabled brand management department. 

“We wanted to signal that we were very serious about 
growing people, and were willing to invest extra time and 
energy” in them, he says. The program is only two years old 
and is too new to have clear results (no one, for instance, has 
been asked to leave yet). 

P&G also created what it calls “The CIO Circle,” which 
rewards long-time IT people who have mastered an area of 
technical expertise. This “master’s” designation allows P&G 
to acknowledge their status as knowledge leaders even if they 


CASE STUDY QUESTIONS 


1. Several comments in the case note that CIOs are in a 
unique position for companywide leadership, extending 
beyond their primary technological concerns. Why do 
you think this is the case? How are CIOs different in 
this regard from other chief officers, for example, in 
finance, HR, or marketing? 


2. After reading the case, what do you think are the 
most important competencies for the successful CIO 
of tomorrow? How do you rate yourself in those? 
Have you considered the importance of these skills 
and abilities before? 


3. How can CIOs prepare their successors for an uncer- 
tain future that will most likely require skills different 
from those possessed by the successful CIOs of today? 
Which key competencies are enduring, and which ones 
are a function of the current technological environment? 
How can CIOs prepare for the latter? 


are not on the management track. Rewards programs en- 
courage employee loyalty, says Laurie Orlov, a consultant 
and principal of LMO Insight. Fast-track development in 
particular should help companies cultivate Gen Y leaders. 
With so much training and management exposure, they have 
every reason to stay, she says. 

CIOs who are serious about developing leaders in their 
group have to be willing to invest time in their people and to 
give them opportunities to grow, even if that means some- 
times letting them fail. It might also mean getting out of 
their way when the time comes. Hess Corp.’s Walton says 
that his goal at all of his jobs has been to identify and de- 
velop replacements for himself. “You do that by creating op- 
portunities for them, you make them look like leadership 
heroes in the eyes of their business and let them take all the 
glory,” says Walton, who is 63 and retired from Hess for the 
second time last month after the company named Jeff Stein- 
horn, who served under Walton, as its new CIO. 

Like most CIOs who aim to develop their staff, Walton 
has used a multipronged strategy for helping people along: 
He mentors, he provides role models, he moves staff into new 
opportunities, and he invests heavily in education. In fact, he 
sent selected top managers to a Harvard Business School ex- 
ecutive program, and IT has two memberships to the BSG 
Concours Group, a strategy and executive education firm. 

Walton sees the coming leadership challenge as a plus, not 
a minus. “There is a gap, but it’s an exciting one to fill,” he says. 
For one thing, Walton thinks the blend of experience and tech- 
nical savvy available when you mix Baby Boomers and Gen Y 
is a powerful one for companies that work to bring these gen- 
erations together. He is talking with Hess about how to do it, 
and he may want to take on such a role in the future. Now that 
a new IT leader is in place at Hess, however, Walton can relax 
for a bit. “Pm going to get my handicap down,” he says. 


Source: Adapted from Michael Fitzgerald, “How to Develop the Next Gener- 
ation of IT Leaders,” CIO Magazine, May 2, 2008. 


REAL WORLD ACTIVITIES 


1. Go online to research the topic of executive succession 
planning and the different approaches in use by compa- 
nies today. Are there any differences for those in infor- 
mation technology, as opposed to other functional 
areas, because of the dynamics of technology change 
and evolution? Which competencies are being targeted 
for IT executives? Prepare a report to summarize your 
findings. 


2. The case mentions several strategies used by companies 
to mentor and develop their next generation of IT lead- 
ers: career planning, leadership development exercises, 
coaching, and so on. As a Gen Y member discussed in 
the chapter, how do these fit in with your expectations 
for the future? Break into small groups with your class- 
mates to discuss these issues, in particular, to what ex- 
tent you believe these approaches match well with your 
culture and personality. 
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FIGURE 12.2 


‘The major components of 
information technology 
management. Note the 
executives with primary 
responsibilities in each area. 
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CEO & ClO ClO & CTO CIO & IT Managers 
Avnet Marshall: Figure 12.3 contrasts how Avnet Marshall’s information technology management 
Managing IT differs from conventional IT management. Notice that it uses the model of IT man- 
agement illustrated in Figure 12.2. For example, in technology management, Avnet 
Marshall uses a best-of-breed approach that supports business needs instead of en- 
forcing a standardized and homogeneous choice of hardware, software, database, and 
networking technologies. In managing its IT organization, Avnet Marshall hires IS 
professionals who can integrate IT with business. These IS professionals are organ- 
ized in workgroups around business/IT initiatives that focus on building IT-enabled 
business services for customers. 
Business / IT Figure 12.4 illustrates the business/IT planning process, which focuses on discovering 
Plannin innovative approaches to satisfying a company’s customer value and business value 
g goals. This planning process leads to the development of strategies and business models 
for new business applications, processes, products, and services. Then a company can 
FIGURE 12.3 IT Management Conventional Practices Avnet Marshall’s Business/IT Practices 
Comparing conventional 
and e-business-driven IT Technology e Approach to IT infra- e  Best-of-breed approach to IT infra- 
management approaches. Management structure may sacrifice structure in which effective match 
match with business with business needs takes prece- 
needs for vendor homo- dence over commitment to technol- 
geneity and technology ogy platform choices and vendor 
platform choices. homogeneity. 
Managing the e Hire “best by position” | @ Hire “best athletes” IS professionals 
IT Organization who can bring specific who can flexibly integrate new IT and 
IT expertise. business competencies. 

e Departments organized | @ Evolving workgroups organized 
around IT expertise with around emerging IT-intensive busi- 
business liaisons and ex- ness initiatives with little explicit dele- 
plicit delegation of tasks. gation of tasks. 

e IT projects have separa- | @ IT funding typically based on value 
ble cost/value considera- proposition around business opportu- 
tions. Funding typically nity related to building services for 
allocated within con- customers. IT project inseparable part 
straints of yearly budget of business initiative. 
for IT function. 


Source: Adapted from Omar El Sawy, Arvind Malhotra, Sanjay Gosain, and Kerry Young, “IT-Intensive Value 
Innovation in the Electronic Economy: Insights from Marshall Industries,” MIS Quarterly, September 1999. 
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FIGURE 12.4 The business/IT planning process emphasizes a customer and business value focus for developing 
business strategies and models and an IT architecture for business applications. 
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More Questions Feedback Feedback 


develop IT strategies and an IT architecture that supports building and implementing 
its newly planned business applications. 

Both the CEO and the CIO of a company must manage the development of com- 
plementary business and IT strategies to meet its customer value and business value 
vision. This coadaptation process is necessary because, as we have seen so often in this 
text, information technologies are a fast-changing but vital component in many strategic 
business initiatives. The business/IT planning process has three major components: 


e Strategy Development. Developing business strategies that support a company’s 
business vision. For example, using information technology to create innovative 
e-business systems that focus on customer and business value. We will discuss this 
process in more detail shortly. 

e Resource Management. Developing strategic plans for managing or outsourc- 
ing a company’s IT resources, including IS personnel, hardware, software, data, 
and network resources. 

e Technology Architecture. Making strategic IT choices that reflect an information 
technology architecture designed to support a company’s business/TT initiatives. 


Information The IT architecture created by the strategic business/IT planning process is a concep- 
Technology tual design, or blueprint, that includes the following major components: 
Architecture 


e Technology Platform. The Internet, intranets, extranets, and other networks, 
computer systems, system software, and integrated enterprise application soft- 
ware provide a computing and communications infrastructure, or platform, that 
supports the strategic use of information technology for e-business, e-commerce, 
and other business/IT applications. 


e Data Resources. Many types of operational and specialized databases, including 
data warehouses and Internet/intranet databases (as reviewed in Chapter 5), store 
and provide data and information for business processes and decision support. 


e Applications Architecture. Business applications of information technology are 
designed as an integrated architecture or portfolio of enterprise systems that sup- 
port strategic business initiatives, as well as cross-functional business processes. 
For example, an applications architecture should include support for developing 
and maintaining the interenterprise supply chain applications and integrated 


FIGURE 12.5 
Comparing business/IT 


strategic and application 
planning approaches. 
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Conventional IT Planning Avnet Marshall’s Business/IT Planning 

e Strategic alignment: IT strategy e Strategic improvisation: IT strategy and 
tracks specified enterprise enterprise business strategy coadaptively 
strategy. unfold based on the clear guidance of a focus 

e CEO endorses IT vision shaped on customer value. 
through CIO. e CEO proactively shapes IT vision jointly 


e IT application development with CIO as part of e-business strategy. 


projects functionally organized as | @ IT application development projects colo- 


technological solutions to business cated with e-business initiatives to form 
issues. centers of IT-intensive business expertise. 

e Phased application development e Perpetual application development based on 
based on learning from pilot continuous learning from rapid deployment 
projects. and prototyping with end-user involvement. 


enterprise resource planning and customer relationship management applications 
discussed in Chapters 7 and 8. 


e IT Organization. The organizational structure of the IS function within a com- 
pany and the distribution of IS specialists are designed to meet the changing 
strategies of a business. The form of the IT organization depends on the mana- 
gerial philosophy and business/IT strategies formulated during the strategic 
planning process. 


Figure 12.5 outlines Avnet Marshall’s planning process for business/IT initiatives and 
compares it with conventional IT planning approaches. Avnet Marshall weaves both 
business and IT strategic planning together coadaptively under the guidance of the 
CEO and the CIO, instead of developing IT strategy by just tracking and supporting 
business strategies. Avnet Marshall also locates IT application development projects 
within the business units that are involved in an e-business initiative to form centers 
of business/IT expertise throughout the company. Finally, Avnet Marshall uses a 
prototyping application development process with rapid deployment of new business 
applications instead of a traditional systems development approach. This application 
development strategy trades the risk of implementing incomplete applications with the 
benefits of gaining competitive advantages from early deployment of new e-business 
services to employees, customers, and other stakeholders and of involving them in 
the “fine-tuning” phase of application development. 


Source: Adapted from Omar El Sawy, Arvind Malhotra, Sanjay Gosain, and Kerry Young, “IT-Intensive Value 
Innovation in the Electronic Economy: Insights from Marshall Industries,” MIS Quarterly, September 1999. 


A radical shift is occurring in corporate computing—think of it as the recentralization 
of management. It’s a step back toward the 1970s, when a data processing manager 
could sit at a console and track all the technology assets of the corporation. Then came 
the 1980s and early 1990s. Departments got their own PCs and software; client/server 
networks sprang up all across companies. 

Three things have happened in the past few years: The Internet boom inspired busi- 
nesses to connect all those networks; companies put on their intranets essential applications 
without which their businesses could not function; and it became apparent that maintain- 
ing PCs on a network is very, very expensive. Such changes create an urgent need for 
centralization. 
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Organizing IT 


Managing 
Application 
Development 


FIGURE 12.6 


The organizational 
components of the IT 


function at Avnet Marshall. 


In the early years of computing, the development of large mainframe computers and 
telecommunications networks and terminals caused a centralization of computer hard- 
ware and software, databases, and information specialists at the corporate level of or- 
ganizations. Next, the development of minicomputers and microcomputers accelerated 
a downsizing trend, which prompted a move back toward decentralization by many 
business firms. Distributed client/server networks at the corporate, department, work- 
group, and team levels came into being, which promoted a shift of databases and in- 
formation specialists to some departments and the creation of information centers to 
support end-user and workgroup computing. 

Lately, the trend is to establish more centralized control over the management of 
the IT resources of a company while still serving the strategic needs of its business 
units, especially their e-business and e-commerce initiatives. This trend has resulted 
in the development of hybrid structures with both centralized and decentralized com- 
ponents. See Figure 12.6. For example, the IT function at Avnet Marshall is organized 
into several business-focused development groups, as well as operations management 
and planning groups. 

Some companies spin off their information systems function into IS subsidiaries 
that offer IS services to external organizations, as well as to their parent company. 
Other companies create or spin off their e-commerce and Internet-related business 
units or IT groups into separate companies or business units. Corporations also out- 
source, that is, turn over all or parts of their IS operations to outside contractors 
known as systems integrators. In addition, some companies are outsourcing software 
procurement and support to application service providers (ASPs), which provide and sup- 
port business application and other software via the Internet and intranets to all of a 
company’s employee workstations. We will discuss outsourcing in greater detail later 
in this section. In the meantime, let’s take a few minutes to review, and expand on, 
what we know about managing the various functions and activities in IS. 


Application development management involves managing activities such as systems 
analysis and design, prototyping, applications programming, project management, 
quality assurance, and system maintenance for all major business/IT development 
projects. Managing application development requires managing the activities of teams 
of systems analysts, software developers, and other IS professionals working on a vari- 
ety of information systems development projects. Thus, project management is a key 
IT management responsibility if business/IT projects are to be completed on time, 
within their budgets, and meet their design objectives. In addition, some systems 
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development groups have established development centers staffed with IS professionals. 
Their role is to evaluate new application development tools and help information 
systems specialists use them to improve their application development efforts. 


IS operations management is concerned with the use of hardware, software, network, and 
personnel resources in the corporate or business unit data centers (computer centers) of 
an organization. Operational activities that must be managed include computer system 
operations, network management, production control, and production support. 

Most operations management activities are being automated by the use of software 
packages for computer system performance management. These system performance 
monitors look after the processing of computer jobs, help develop a planned schedule of 
computer operations that can optimize computer system performance, and produce 
detailed statistics that are invaluable for effective planning and control of computing 
capacity. Such information evaluates computer system utilization, costs, and performance. 
This evaluation provides information for capacity planning, production planning and 
control, and hardware/software acquisition planning. It is also used in quality assurance 
programs, which stress the quality of services to business end users. See Figure 12.7. 

System performance monitors also supply information needed by chargeback 
systems that allocate costs to users on the basis of the information services rendered. 
All costs incurred are recorded, reported, allocated, and charged back to specific end- 
user business units, depending on their use of system resources. When companies use 
this arrangement, the information services department becomes a service center whose 
costs are charged directly to business units rather than being lumped with other ad- 
ministrative service costs and treated as overhead costs. 

Many performance monitors also feature process control capabilities. Such pack- 
ages not only monitor but also automatically control computer operations at large data 
centers. Some use built-in expert system modules that are based on knowledge gleaned 
from experts in the operations of specific computer systems and operating systems. 
These performance monitors provide more efficient computer operations than human- 
operated systems. They also enable “lights out” data centers at some companies, where 
computer systems are operated unattended, especially after normal business hours. 
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Source: Courtesy of Computer Associates. 
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IT Staff Planning 


The CIO and Other 
IT Executives 


Top IT Jobs: 
Requirements and 
Compensation 


The success or failure of an information services organization rests primarily on the 
quality of its people. Many firms consider IT staff planning, or recruiting, training, 
and retaining qualified IS personnel, as one of their greatest challenges. Managing 
information services functions involves the management of managerial, technical, and 
clerical personnel. One of the most important jobs of information services managers is 
to recruit qualified personnel and develop, organize, and direct the capabilities of ex- 
isting personnel. Employees must be continually trained to keep up with the latest 
developments in a fast-moving and highly technical field. Employee job performances 
must be continually evaluated, and outstanding performances must be rewarded with 
salary increases or promotions. Salary and wage levels must be set, and career paths 
must be designed so that individuals can move to new jobs through promotion and 
transfer as they gain seniority and expertise. 


The chief information officer (CIO) oversees all use of information technology in many 
companies and brings it into alignment with strategic business goals. Thus, all tradi- 
tional computer services, Internet technology, telecommunications network services, 
and other IS technology support services are the responsibility of this executive. The 
CIO does not direct day-to-day information services activities; instead, CIOs concen- 
trate on business/IT planning and strategy. They also work with the CEO and other 
top executives to develop strategic uses of information technology in e-business and 
e-commerce that help make the firm more competitive in the marketplace. Many 
companies have also filled the CIO position with executives from the business func- 
tions or units outside the IS field. Such CIOs emphasize that the chief role of informa- 
tion technology is to help a company meet its strategic business objectives. 


e Chief information officer 
Base salary range: $194,000-$303,000-+; varies by location 
Bonus range: Up to 40 percent of salary 
The top position in IT isn’t all about technology. To land this job, you need to 
be a Business ‘Technologist with a big “B” and a big “T.” If you understand the 
business, the organization’s strategy, and the broad spectrum of technologies, 
systems, applications, and people necessary to execute it, you will be in great 
demand by organizations. 


e Chief technology officer 
Base salary range: $162,000-$245,000+; varies by location 
Bonus range: Up to 40 percent of salary 
If you’re second-in-command to the CIO or chief technology officer and you 
have years of applications development experience, your next move should be into 
the chief technology officer’s spot. To land this job, you’ll need to be a passionate 
problem solver with a demonstrated record of reducing development time. 


e Chief security officer 
Base salary range: $142,000-$205,000-+; varies by location 
Bonus range: Up to 40 percent of salary 
If you understand the issues related to securing the data resources and informa- 
tion assets of the organization, then this is the job for you. Strong candidates 
with a deep understanding of both the technical and managerial sides of the 
field are in great demand. 


e E-commerce architect 
Base salary range: $115,000-$170,000+; varies by location 
Bonus range: Up to 15 percent of salary 
If you know Java, Perl, C++, and Web services; have experience in systems archi- 
tecture; and can design an Internet solution from concept through implementa- 
tion, many companies want you to plan and develop their e-commerce sites. 


Technology 


Management 


Managing User 
Services 
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e Technical team leader 
Base salary range: $75,000-$100,000+; varies by location 
Bonus range: Up to 20 percent of salary 
Senior technical team leaders with good communication, project management, 
and leadership skills, as well as knowledge of Web languages and databases, are 
still in great demand. 


e Practice manager 
Base salary range: $70,000-$100,000+; varies by location 
Bonus range: Up to 20 percent of salary 
If you’ve got a background in IT assessment and a pedigree in business develop- 
ment (MBA preferred), you can land a job as a point person for big projects. 
You'll need skills in IT operations and software assessment, as well as in market- 
ing, staffing, budgeting, and building customer relationships. 


e Systems analyst 
Base salary range: $56,000-$100,000+; varies by location 
Bonus range: Up to 25 percent of salary 
If you have problem-solving skills and a degree in information systems (BS or 
MBA), you can be assured of finding a good job as a systems analyst. You'll need 
to have excellent interpersonal skills, good technical skills, and an ability to apply 
your problem-solving and critical-thinking skills to the design of new systems. 


Source: www.salary.com. 


The management of rapidly changing technology is important to any organization. 
Changes in information technology, like the rise of the PC, client/server networks, 
and the Internet and intranets, have come swiftly and dramatically and are expected to 
continue into the future. Developments in information systems technology have had, 
and will continue to have, a major impact on the operations, costs, management work 
environment, and competitive position of many organizations. 

Thus, all information technologies must be managed as a technology platform for 
integrating internally focused or externally facing business applications. Such technolo- 
gies include the Internet, intranets, and a variety of e-commerce and collaboration tech- 
nologies, as well as integrated enterprise software for customer relationship management, 
enterprise resource planning, and supply chain management. In many companies, tech- 
nology management is the primary responsibility of a chief technology officer (CTO), 
who is in charge of all information technology planning and deployment. 


‘Teams and workgroups of business professionals commonly use PC workstations, soft- 
ware packages, and the Internet, intranets, and other networks to develop and apply 
information technology to their work activities. Thus, many companies have responded 
by creating user services, or client services, functions to support and manage end-user 
and workgroup computing. 

End-user services provide both opportunities and problems for business unit 
managers. For example, some firms create an information center group staffed with user 
liaison specialists or Web-enabled intranet help desks. IS specialists with titles such as 
user consultant, account executive, or business analyst may also be assigned to end-user 
workgroups. These specialists perform a vital role by troubleshooting problems, gath- 
ering and communicating information, coordinating educational efforts, and helping 
business professionals with application development. 

In addition to these measures, most organizations still establish and enforce poli- 
cies for the acquisition of hardware and software by end users and business units. This 
process ensures their compatibility with company standards for hardware, software, 


514 © Module V/ Management Challenges 


and network connectivity. Also important is the development of applications with 
proper security and quality controls to promote correct performance and safeguard 
the integrity of corporate and departmental networks and databases. 


Outsourcin g An increasingly popular approach to managing the IS and IT functions of the organi- 

A zation is to adopt an outsourcing strategy. Outsourcing, in broad terms, is the purchase 

and Offshorin of goods or services that were previously provided internally from third-party part- 

IT and IS ners. Outsourcing is a generic term used for a broad range of information technology 
functions that are selectively contracted to an external service provider. 


Outsourcing A commonly outsourced IS function is software application development. This proc- 
ess includes contracting (or subcontracting) with an external organization for the de- 
velopment of complete or partial software products/projects, the purchase of packaged 
or customized package software products, or activities and/or resources that aid in the 
software development life cycle. Figure 12.8 lists the functions typically outsourced, 
the reasons behind the decision to outsource, and several aspects associated with suc- 
cessful vendor selection and a successful outsourcing effort. 

Although companies can, theoretically, choose to outsource any organization func- 
tion for any reason, there are five main reasons behind a decision to outsource: 


FIGURE 12.8  Outsourcing’s Top 10. Notice, despite all of the media coverage, application development is No. 3. 


‘Top 10 Reasons Companies Outsource Top 10 Factors in Vendor Selection 


1. Reduce and control operating costs 1. Commitment to quality 
2. Improve company focus 25 Price 
3. Gain access to world-class capabilities 3. References/reputation 
4. Free internal resources for other purposes 4. Flexible contract terms 
5. Necessary resources are not available internally 5. Scope of resources 
6. Accelerate reengineering benefits 6. Additional value-added capability 
7. Function is difficult to manage internally or is out of 7. Cultural match 
control 8. Existing relationship 
8. Make capital funds available 9. Location 


9. Share risks 10. Other 
10. Cash infusion 


Top 10 Factors for Successful Outsourcing 


1. Understand company goals and objectives 1. Maintenance and repair 

2. A strategic vision and plan 2. Training 

3. Select the right vendor 3. Applications development 

4. Ongoing management of the relationships 4. Consulting and reengineering 

5. A properly structured contract 5. Mainframe data centers 

6. Open communication with affected individuals/groups 6. Client/server services and administration 
7. Senior executive support and involvement 7. Network administration 

8. Careful attention to personnel issues 8. Desktop services 

9. Near-term financial justification 9. End-user support 


10. Use of outside expertise 10. Total IT outsourcing 


Source: The Outsourcing Institute. 


Offshoring 
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Save Money—Achieve Greater Return on Investment (ROD) 


e Outsourcing IS/IT functions to skilled service providers is often a strategic approach 
to stretching strained budgets. Companies that take a well-managed approach to 
outsourcing can gain cost savings of upwards of 40-80 percent. 


Focus on Core Competencies 


e Outsourced professionals allow an organization and its employees to focus on the 
business they are in rather than a business in which they are not. By using an out- 
sourcing strategy for application development, an organization can focus its IS 
professionals on identifying and solving business problems rather than on pro- 
gramming and prototyping new applications. 


Achieve Flexible Staffing Levels 


e Strategic use of an outsourcing approach to IS/IT functions can result in business 
growth without increasing overhead. Outsourcing provides a pool of qualified 
professionals available for unique, niche, or overflow projects. If the unique skill 
set required by an organization is difficult to find or expensive to maintain in- 
house, outsourcing can allow for the acquisition of the needed expertise. 


Gain Access to Global Resources 


e The Outsourcing Institute asserts that the rules for successfully growing a busi- 
ness have changed: “It’s no longer about what you own or build. . . . [Instead] 
success is hinged to resources and talent you can access.” Using global expertise 
allows an organization to gain the advantage of skilled labor, regardless of loca- 
tion, and significantly increase the quality of its deliverables. As such, outsourcing 
can create opportunities for smaller businesses that might not otherwise be possi- 
ble due to costs or geophysical constraints. 


Decrease Time to Market 


e Outsourcing extends the traditional small business benefits of flexibility and re- 
sponsiveness, allowing smaller organizations to compete effectively against bigger 
firms. Supplementing an existing workforce with offshore support could allow 
for productivity 24 hours a day. Having access to resources able to work on key 
projects even while local employees are asleep can serve to accelerate time to 
market and provide a key competitive advantage. 


Although often confused with outsourcing, offshoring is also increasingly becoming 
part of a strategic approach to IS/IT management. Offshoring can be defined as a relo- 
cation of an organization’s business processes (including production/manufacturing) to 
a lower-cost location, usually overseas. Offshoring can be considered in the context of 
either production offshoring or services offshoring. After its accession to the World ‘Trade 
Organization (WTO), China emerged as a prominent destination for production off- 
shoring. After technical progress in telecommunications improved the possibilities of 
trade in services, India became a country that chose to focus on this domain. 

The growth of services offshoring in information systems is linked to the availabil- 
ity of large amounts of reliable and affordable communication infrastructure following 
the telecom bust of the late 1990s. Coupled with the digitization of many services, it 
became possible to shift the actual delivery location of services to low-cost locations in 
a manner theoretically transparent to end users. 

India, the Philippines, Ireland, and Eastern European countries benefited greatly 
from this trend due to their large pool of English-speaking and technically qualified 
workers. India’s offshoring industry took root in IT functions in the 1990s and has 
since moved to back-office processes, such as call centers and transaction processing, 
as well as high-end jobs such as application development. 
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Offshoring is often enabled by the transfer of valuable information to the offshore 
site. Such information and training allows the remote workers to produce results of 
comparable value previously produced by internal employees. When such transfer 
includes proprietary materials, such as confidential documents and trade secrets, 
protected by nondisclosure agreements, then intellectual property has been transferred 
or exported. The documentation and valuation of such exports is quite difficult 
but should be considered because it comprises items that may be regulated or taxable. 

Offshoring has been a controversial issue with heated debates. On one hand, it is 
seen as benefiting both the origin and destination country through free trade. On the 
other hand, job losses in developed countries have sparked opposition to offshoring. 
Some critics agree that both sides will benefit in terms of overall production and 
numbers of jobs created but that the subjective quality of the new jobs will be less 
than the previous ones. While this debate continues, companies continue to use off- 
shoring as a viable IS/IT management approach. Let’s look at a real-world example of 
global outsourcing. 


Royal Dutch Shell has signed a five-year, $4 billion outsourcing deal with three 
global IT and telecommunications suppliers. The value of the contracts for the 
three suppliers is $1.6 billion with AT&T, $1 billion for EDS, and $1.6 billion with 
‘T-Systems. 

Shell announced that it has contracted T-Systems, AT&T, and EDS under a mas- 
ter service agreement (MSA), for “significant improvements” to its efficiency and 
productivity that will see an axing of some tech jobs and a transfer of 3,000 IT staff 
to the service providers. Under the MSA, Shell will outsource its IT infrastructure in 
three service bundles: “AT&T for network and telecommunications, T-Systems for 
hosting and storage, and EDS for end user computing services and for integration of 
the infrastructure services.” 

The suppliers will provide integrated services to more than 1,500 sites worldwide. 
“Shell’s approach combines all the advantages of decentralised service provision with 
the benefits and efficiency of a centralised governance structure,” says Elesh Khakhar, 
a partner at consultant firm ‘TPI, which is an advisor to Shell. Khakar added that the 
multisupplier deal has been designed to “encourage collaborative behavior” between 
suppliers, while it allows Shell to “retain full control of strategy and service integra- 
tion. In addition to all of the usual business benefits, Shell will be able to exploit 
emerging commoditized services designed for the consumer market, such as email or 
internet phone services, and integrate them within their services when they become 
robust enough for commercial use.” 

Shell CIO Alan Matula said: “This deal is a major strategic choice for Shell. Part- 
nering with EDS, T-Systems and AT&T gives us greater ability to respond to the 
growing demands of our businesses. It allows Shell IT to focus on Information Tech- 
nology that drives competitive position in the oil and gas market, whilst suppliers 
focus on improving essential IT capability.” 


Source: Adapted from Siobhan Chapman, “Shell Signs $4 Billion, Multi-Supplier Outsourcing Deal,” CIO Magazine, 
April 3, 2008. 


While in the past much of the motivation to outsource and offshore various portions 
of the IT/IS operation of a firm were driven primarily by cost, a more recent and trou- 
bling trend is the increasing motivation to find highly qualified IT/IS talent. Jobs are 
plentiful in the United States for today’s IS graduate but enrollments in United States. 
IS programs remain down. This results in a decreasing supply of qualified labor for 
the best paying jobs in the field. To combat this, firms are looking at the science and 
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Risk without 
Reward: Weak IT 
Controls at 
Société Générale 
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engineering graduate of other countries to fill their needs. As we discussed in Chapter 2, 
the jobs that were outsourced and offshored in the late 1990s and early 2000 were not 
the ones typically benchmarked by university-level IS programs. As such, no real job 
opportunities were lost to qualified graduates. ‘Today, however, the lack of qualified IS 
graduates means companies have to turn elsewhere to fill these jobs. The jobs are stay- 
ing here, but the labor is being imported. The single most effective method to counter 
this trend is for more young people to seek a career in the information systems field. 
IS/IT is one of the hottest fields on the planet for job opportunities and the word 
needs to get out. Many organizations are focusing on outreach programs that extend 
down to the pre-high school levels to begin educating, or reeducating, the public with 
regard to these vast opportunities. 


Managing information technology is not an easy task. The information systems func- 
tion often has performance problems in many organizations. The promised benefits of 
information technology have not occurred in many documented cases. Studies by 
management consulting firms and university researchers have shown that many busi- 
nesses have not been successful in managing their use of information technology. 
Thus, it is evident that in many organizations, information technology is not being 
used effectively and efficiently, and there have been failures in IT management. For 
example: 


e Information technology is not being used effectively by companies that use IT pri- 
marily to computerize traditional business processes instead of developing inno- 
vative e-business processes involving customers, suppliers, and other business 
partners, e-commerce, and Web-enabled decision support. 


e Information technology is not being used efficiently by information systems that 
provide poor response times and frequent downtimes, or by IS professionals and 
consultants who do not properly manage application development projects. 


Let’s look more closely, using a real-world example. 


It’s a lethal combination of process oversights and system failures that is the stuff of 
CIO nightmares: An investigation into rogue trader Jerome Kerviel’s fraudulent ac- 
tions at Société Générale bank uncovered an apparent breakdown in financial and 
internal IT controls subverted by an employee with IT know-how and authorized 
systems access. IT experts say the case should serve as a warning that businesses can 
do better to manage IT-related risk. 

“Much time is spent on protecting the external threat,” says J.R. Reagan, manag- 
ing director and global solution leader for risk, compliance and security at Bearing- 
Point. “But the internal threat can be even larger in terms of risk to the company.” In 
the case of Société Générale, not only were IT security controls insufficient, but the 
bank’s staff did not fully investigate red flags that arose. Recent research by the Pone- 
mon Institute concludes that “insider threats represent one of the most significant 
information security risks.” In a survey of 700 IT practitioners, 78 percent said they 
believe individuals have too much access to information that isn’t pertinent to their 
jobs, while 59 percent said such access presents business risks. What’s more, IT pro- 
fessionals see a disconnect with business leaders: 74 percent said senior management 
does not view governance of access to information as a strategic issue. 

One of Société Générale’s primary business lines is derivatives—financial instru- 
ments that allow traders to make contracts on a wide range of assets (such as equities, 
bonds, or commodities) and attempts to reduce (or hedge) the financial risk for one 
party in the deal. Trading derivatives, however, necessitates some aggressiveness and 
can be fraught with risk. 
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Reagan observes that in the case of Société Générale, “their activities deal with 
high volume, high velocity and quick tempo trading of stock,” and it’s likely business 
leaders “wouldn’t put up with” security measures that would slow them down. For 
example, Société Générale employed single-factor authentication (using one 
method, such as passwords, to grant access to its systems) rather than stronger dual- 
factor authentication (requiring that individuals employ two methods of identifying 
themselves to gain access). “The security team needs to explain the risk exposure 
and the possibility of losing billions in fraudulent trades if security is not adequately 
addressed,” Reagan says. “But most security guys aren’t well enough in tune with the 
business to be able to articulate a business case like that.” 

‘That disconnect can be enormously destructive, as the Société Générale incident 
shows. “The Société Générale case brings to the fore the fact that business risk can 
be directly exposed through IT,” says Scott Crawford, a security expert and research 
director at Enterprise Management Associates. “Kerviel allegedly manipulated the 
IT controls on the business systems based on his midoffice experience and back-office 
knowledge and expertise.” 

“Businesses are just now beginning to awaken to the controls within the IT envi- 
ronment,” Crawford says. “If you’re betting the farm and strategy on the IT con- 
trols, it behooves the organization to ensure that those controls are reasonably 
resistant to subversion.” 


Source: Adapted from Nancy Weil, “Risk without Reward,” CIO Magazine, May 1, 2008. 


What is the solution to failures in the information systems function? There are no 
quick and easy answers. However, the experiences of successful organizations reveal 
that extensive and meaningful managerial and end-user involvement is the key in- 
gredient of high-quality information systems performance. Involving business manag- 
ers in the governance of the IS function and business professionals in the development 
of IS applications should thus shape the response of management to the challenge of 
improving the business value of information technology. See Figure 12.9. 

Involving managers in the management of IT (from the CEO to the managers of 
business units) requires the development of governance structures (e.g., executive coun- 
cils, steering committees) that encourage their active participation in planning and 
controlling the business uses of IT. Thus, many organizations have policies that re- 
quire managers to be involved in IT decisions that affect their business units. This 
requirement helps managers avoid IS performance problems in their business units 
and development projects. With this high degree of involvement, managers can im- 
prove the strategic business value of information technology. Also, as we noted in 
Chapter 10, only direct end-user participation in system development projects can 
solve the problems of employee resistance and poor user interface design. Overseeing 
such involvement is another vital management task. 


Information technology governance (ITG), is a subset discipline of corporate govern- 
ance focused on the information technologies (IT), information systems (IS), their 
performance, use, and associated risks. The rising interest in IT governance is due, in 
part, to governmental compliance initiatives such as Sarbanes-Oxley in the United 
States and its counterpart in Europe, Basel II. Additional motivation comes from the 
acknowledgment that IT projects can easily get out of control and profoundly affect 
the performance of an organization. 

A characteristic theme of IT governance discussions is that the IT capability can no 
longer be thought of as a mythical black box, the contents of which are known only to the 
IT personnel. This traditional handling of IT management by board-level executives is 
due to limited technical experience and the perceived complexity of IT. Historically, key 


FIGURE 12.9 


IT Decision 
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Senior Management’s Role 


Senior management needs to be involved in critical business/IT decisions to optimize the business value 
and performance of the IT function. 


Consequences of Abdicating the Decision 


e How much should we 
spend on IT? 


e Which business processes 
should receive our IT 
dollars? 


Define the strategic role that IT 
will play in the company, and then 
determine the level of funding 
needed to achieve that objective. 


Make clear decisions about which 
IT initiatives will and will not be 


funded. 


‘The company fails to develop an IT platform 
that furthers its strategy, despite high IT 
spending. 


A lack of focus overwhelms the IT unit, which 
tries to deliver many projects that may have 
little companywide value or can’t be imple- 
mented well simultaneously. 


e Which IT capabilities need 
to be companywide? 


Decide which IT capabilities 
should be provided centrally and 
which should be developed by indi- 
vidual businesses. 


Excessive technical and process standardiza- 
tion limit the flexibility of business units, or 

frequent exceptions to the standards increase 
costs and limit business synergies. 


e How good do our IT 
services really need to be? 


e What security and privacy 
risks will we accept? 


Decide which features—for exam- 
ple, enhanced reliability or re- 
sponse time—are needed on the 
basis of their costs and benefits. 


Lead the decision making on the 
trade-offs between security and 
privacy on one hand and conven- 
ience on the other. 


The company may pay for service options 
that, given its priorities, aren’t worth their 
costs. 


An overemphasis on security and privacy may 
inconvenience customers, employees, and 
suppliers; an underemphasis may make data 
vulnerable. 


e Whom do we blame if an 
IT initiative fails? 


Assign a business executive to be 


The business value of systems is never 
realized. 


accountable for every IT project; 
monitor business metrics. 


Source: Jeanne W. Ross and Peter Weill, “Six IT Decisions Your IT People Shouldn’t Make,” Harvard Business Review, November 2002, p. 87. 


decisions were often deferred to IT professionals. IT governance implies a system in 
which all stakeholders, including the board, internal customers, and related areas such as 
finance, have the necessary input into the decision-making process. This prevents a single 
stakeholder, typically IT, from being blamed for poor decisions. It also prevents users 
from later complaining that the system does not behave or perform as expected. 

The focus of ITG is specifying decision inputs and rights along with an accounta- 
bility framework such that desirable behaviors toward and in the use of IT are devel- 
oped. It highlights the importance of IT-related matters in contemporary organizations 
and ensures that strategic IT decisions are owned by the corporate board, rather than 
by the CIO or other IT managers. The primary goals for information technology 
governance are to (1) assure that the significant organizational investments in IT and 
IS generate their maximum business value and (2) mitigate the risks that are associated 
with IT. This is accomplished by implementing an organizational structure with well- 
defined roles for the responsibility of the decisions related to the management and use 
of IT such as infrastructure, architecture, investment, and use. 

One very popular approach to IT governance is COBIT (Control Objectives for In- 
formation and related Technology). COBIT is a framework of best practices for IT 
management created by the Information Systems Audit and Control Association ISACA) 
and the IT Governance Institute TGI). COBIT provides all members of the organiza- 
tion with a set of generally accepted measures, indicators, processes, and best practices to 
help them maximize the benefits derived through the use of information technology and 
in developing appropriate IT governance and control structures in a company. 

COBIT has 34 high-level processes covering 210 control objectives categorized 
in four domains: (1) Planning and Organization, (2) Acquisition and Implementation, 
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(3) Delivery and Support, and (4) Monitoring. Managers benefit from COBIT be- 
cause it provides them with a foundation upon which IT-related decisions and invest- 
ments can be based. Decision making is more effective because COBIT helps 
management define a strategic IT plan, define the information architecture, acquire 
the necessary IT hardware and software to execute an IT strategy, ensure continuous 
service, and monitor the performance of the IT system. IT users benefit from COBIT 
because of the assurance provided to them by COBIT’s defined controls, security, and 
process governance. COBIT also benefits auditors because it helps them identify IT 
control issues within a company’s IT infrastructure, and it helps them corroborate 
their audit findings. Figure 12.10 illustrates the relationships between the four do- 
mains in COBIT and categorizes both the high-level processes and control objectives 
associated with them. 
Let’s look at a real-world example of COBIT in action. 


FIGURE 12.10 COBIT isa popular IT governance approach that focuses on all aspects of the IT function 
throughout the organization. 


PO1 define a strategic IT plan 


PO2 define the information architecture 
PO3 determine the technological direction 


monitor the processes 


INFORMATION 
-effectiveness 
-efficiency 

-confidentiality 


IT RESOURCES 
-people 
-application systems 


DELIVERY & 


DS1 define service levels 

DS2 manage third-party services 

DS3 manage performance and capacity 
DS4 ensure continuous service 


Harley-Davidson 
Motor Company: 
Adopting COBIT 
as an Umbrella for 
All Control and 
Compliance 
Activities 
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Harley-Davidson Motor Company was founded in 1903 in Milwaukee, Wisconsin. It 
is the oldest producer of motorcycles in the United States and has enjoyed 20 con- 
secutive years of record revenue. For the year ended December 31, 2005, Harley- 
Davidson shipped 329,000 motorcycles (a 3.7 percent increase), had revenue of 
$5.3 billion, and experienced worldwide growth of 6.2 percent. 

In 2003, Harley-Davidson had limited IT controls in place and its staff had lim- 
ited control knowledge. There was no standardized user access process, no defined 
and documented change management process, and no rigor on backup and recovery 
processes, and there were minimal organizational standards. Although the company 
had been able to operate this way for more than a hundred years, the need to get up 
to speed on compliance and control was looming in the horizon: SOX, the Sarbanes- 
Oxley Act. 

‘To jump-start IT governance and Sarbanes-Oxley activities, Harley-Davidson 
created an IS compliance department and began to implement a vendor’s general 
computer controls model. After attending a COBIT User Convention, a Harley- 
Davidson risk specialist recommended COBIT to management and then converted 
the control framework to COBIT, published by the IT Governance Institute. Con- 
currently, the internal audit department was driving IT to move beyond pure com- 
pliance. The company realized it needed a broad control framework, which helped 
eliminate the constantly changing “bar” used as a benchmark. 

Key to introducing COBIT was ensuring that all of IT and management under- 
stood why they needed to care about effective, value-focused controls. Getting them 
to realize that there are many important business reasons for this was the first key 
hurdle to be successfully addressed. COBIT’s business-focused language allowed 
management, IT, and internal audit to ensure that they were on the same road. 

Harley-Davidson’s COBIT migration process needed to go beyond questions 
such as “Do you have a systems development life cycle process (SDLC)?” to stimu- 
late internal conversations on what an SDLC really is and which skills were required. 
The team started by mapping implemented controls to COBIT and compared the 
results to a previously accepted Big 4 accounting firm’s COBIT mapping. Gaps were 
identified and plans were developed to close these gaps. 

One of the major benefits of using COBIT as its overall internal control and 
compliance model was getting everyone—especially nontechnical motorcycle experts— 
revved up about control activities and why controls are important. Harley-Davidson 
is subject to many regulations, including HIPAA and Gramm-Leach-Bliley, and 
COBIT serves as an umbrella framework that helps the company zero in on appro- 
priate control and compliance activities. 

Driving internal change was also a key goal of this highly competitive company, 
and COBIT benchmarking was an invaluable tool for independent comparison. It 
put the information in the right perspective for management and to obtain overall 
buy-in. The framework shows peer comparison in an unbiased format and is used as 
part of every IT audit. Best of all, it invites discussion about where the company 
would like to be. 


Source: Adapted from ISACA, COBIT and IT Governance Case Study: Harley-Davidson, May 2006. 
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SECTION II 


The 
International 
Dimension 


Global IT 
Management 


Global Teams: It’s 
Still a Small World 


Managing Global IT 


Whether they are in Berlin or Bombay, Kuala Lumpur or Kansas, San Francisco or 
Seoul, companies around the globe are developing new models to operate competitively 
in a digital economy. These models are structured, yet agile; global, yet local; and 
they concentrate on maximizing the risk-adjusted return from both knowledge and 
technology assets. 


International dimensions have become a vital part of managing a business enter- 
prise in the internetworked global economies and markets of today. Whether you be- 
come a manager in a large corporation or the owner of a small business, you will be 
affected by international business developments and deal in some way with people, 
products, or services whose origin is not your home country. 

Read the Real World Case on the next page. We can learn a lot about approaches 
to successfully develop and roll out worldwide system implementations from this 
case. See Figure 12.11. 


Figure 12.12 illustrates the major dimensions of the job of managing global informa- 
tion technology that we cover in this section. Notice that all global IT activities must 
be adjusted to take into account the cultural, political, and geoeconomic challenges 
that exist in the international business community. Developing appropriate business 
and IT strategies for the global marketplace should be the first step in global informa- 
tion technology management. Once that is done, end users and IS managers can move 
on to developing the portfolio of business applications needed to support business/IT 
strategies; the hardware, software, and Internet-based technology platforms to sup- 
port those applications; the data resource management methods to provide necessary 
databases; and finally the systems development projects that will produce the global 
information systems required. 


We seem to have reached a point where virtually every CIO is a global ClO—a 
leader whose sphere of influence (and headaches) spans continents. The global CIO’s 
most common challenge, according to CIO Executive Council members, is manag- 
ing global virtual teams. In an ideal world, HR policies across the global IT team 
should be consistent, fair, and responsive. Titles and reporting structures (if not 
compensation) should be equalized. 

The council’s European members, representing Royal Dutch Shell, Galderma, 
Olympus, and others, commissioned a globalization playbook that collects and codi- 
fies best practices in this and other globalization challenges. 

Obtain local HR expertise. Companies must have a local HR person in each 
country to deal with local laws. “Hiring, firing, and training obligations must be 
managed very differently in each location, and you need someone with local exper- 
tise on the laws and processes,” says Michael Pilkington, former CIO of Euroclear, the 
Brussels-based provider of domestic and cross-border settlement for bond, equity, 
and fund transactions. 

Create job grade consistency across regions. Euroclear is moving toward a 
job evaluation methodology that organizes job types into vertical categories, such as 
managing people/process, product development, business support, and project man- 
agement. This provides a basis for comparing and managing roles and people across 
locations. Grade level is not the same thing as a title; people’s titles are much more 
subject to local conventions. 


(text continues on page 525) 
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REAL WORLD 


CASE 


he reinsurance industry isn’t for the faint of heart. 

The business processes that enable reinsurance firms 

to form agreements with other insurance companies 
to accept all or part of their risk can get mighty complex, 
mighty quickly. 

Now imagine developing a single system that manages 
reinsurance business processes for numerous offices around 
the world—offices whose staffs speak different languages, are 
in different time zones, and just might be stuck in their ways 
as to how they manage their business. It’s a challenge that 
could overwhelm you if you tried to tackle it all at once instead 
of breaking it into small pieces. 

When workers in the global software group at Reinsur- 
ance Group of America Inc. (RGA) in Chesterfield, Missouri, 
first took on this mammoth project, they would have been 
the first to tell you they were unprepared for the obstacles 
that lay ahead. 

“This whole system required so much communication 
and teamwork, and I’m not sure we understood at first what 
we needed to contribute to make it a success,” says Mike 
Ring, project manager at RGA. Yet by engaging the business 
and adapting its own practices to the demands of the situa- 
tion, the group is successfully rolling out an integrated, mul- 
ticurrency, multilanguage life reinsurance administration 
system, dubbed CybeRe, for its international division. 

Before CybeRe, workers in RGA’ global offices mainly 
relied on a mix of spreadsheets and databases to manage cli- 
ents. Now, with information stored in one location, workers 
can analyze data by client, contract, and product and find 
client errors more easily. “People can stop worrying about, 
‘If I sell this business, how am I going to manage it?’” says 


FIGURE 12411 


Consistency across the different business functions, 
countries, languages, and processes involved in world- 
wide implementations is one of the most important 
challenges faced by global organizations today. 


Source: Getty Images. 


Reinsurance Group of America 
and Fonterra: Going for Unified 
Global Operations 


Azam Mirza, vice president of global software and head of 
the CybeRe effort. 

The system also strengthens data validation and data 
quality, Ring adds, which will enable better risk analysis and 
retention analysis, resulting in better profitability. Ulti- 
mately, return on investment will reach over 15 percent, 
“which compares very favorably to the average ROI for 
RGA’ products, which are normally in the range of 12 per- 
cent to 15 percent,” Mirza says. 

The picture wasn’t always this rosy. When the project 
began six years ago, IT began to gather business require- 
ments from the global offices, planning to emerge a couple 
of years later with a full-blown system. By late 2001, how- 
ever, it became apparent that a phased approach was more 
practical. “The different units all do things slightly differ- 
ently, and getting everyone to agree became very conten- 
tious,” Chan explains. So the group embarked on a plan to 
build a pilot system in one office (South Africa) and gradu- 
ally implement it in the remaining ones, with as few cus- 
tomizations as possible. 

It wasn’t always smooth sailing. For one thing, convert- 
ing all the historical data and loading it into the CybeRe sys- 
tem required a significant data cleansing and migration 
effort. Other factors, such as differences in the terminologies 
used in various offices, also caused delays. For example, 
while it gathered requirements, IT asked whether the South 
African office used compound benefits. Although it said it 
did not, it turned out that the office just used a different 
term: acceleration of benefits. 

“The change in scope delayed us four or five months,” 
Mirza says. Probably the biggest challenge—which contin- 
ues today—is getting people to accept common practices as 
defined by the system. “That’s where we’re the bad guys,” 
Mirza says. “If they really need it, they have to prove it. We 
challenge everything. We don’t want to create a product 
that’s convoluted because it tries to be everything to every- 
body.” 

Despite the local customizations, RGA still maintains 
just one version of CybeRe. Local units can just “turn on” 
the options or customizations that are relevant to their busi- 
nesses. “Not maintaining 13 different versions is very im- 
portant,” Mirza says. “It’s critical to our success.” 

“Given the life reinsurance market’s consolidation of re- 
cent years, CybeRe should provide RGA with an important 
competitive weapon. RGA aims to ‘reinvent reinsurance.’ 
That is an ambitious goal. CybeRe is an important step along 
the way.” 

Greg James is chief information officer and general man- 
ager of global business processes at Fonterra. It is a unique 
role, instrumental in ensuring that the only silos at the dairy 
group are of the giant stainless steel variety. James was on 
sabbatical following a year-long assignment in Europe with 
the New Zealand Dairy Board when he was offered to head 
what he describes as a “small business initiative” called Jedi. 
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The call came from an executive of Fonterra, which had just 
been formed, and the job was director of the dairy group’s 
biggest business transformation program to date. 

Jedi, which was rolled out in 2.5 years, entailed mov- 
ing Fonterra’s commodity business to a common ERP 
platform and “a single global way of doing things.” James 
says the Jedi program aimed to look at the supply chain of 
the dairy giant “from cow to manufacturing to storage to 
happy customers.” 

The change involved was massive, for Fonterra’s supply 
chain covers four million cows that produce 20 billion liters 
of milk each year. It has offices in 70 countries and employs 
nearly 19,000 staff. Fonterra, says James, would be recog- 
nized as New Zealand’s largest company if it were listed in 
the Stock Exchange. In order to implement the new envi- 
ronment, “We had to reinvent ourselves; analyze every part 
of the business, all processes, all organizational structure,” 
says James. 

In effect, the Jedi program dismantled traditional silos in 
the organization and standardized global processes. “It has 
enabled us to effectively bring all components that previ- 
ously existed in each group, in other business units, bring 
them all together and get commonality in terms of the way 
we do things. It has driven consistency of processes, and has 
enabled us to draw consistency in approaching framework in 
terms of how we operate.” 

‘Today, he notes, “We do the things the same way in 
Germany, Mexico and New Zealand.” As James explains, 
Fonterra was set up in 2000 as an amalgamation of the old 
dairy industry, with self-contained business functions. 
Fonterra consolidated its back-office functions globally 
within New Zealand, into a business transactional services 
activity based in Hamilton. James says the Hamilton opera- 
tions fared well when benchmarked against BPO organiza- 
tions locally and overseas. “Our model is better than most 
international models.” 

Instead of having disparate sales offices for various business 
units, a customer service center was set up at the Auckland’s 


CASE STUDY QUESTIONS 


1. What is the business value of these global system devel- 
opments for the companies mentioned in the case? 
How did they achieve these benefits? What were the 
major obstacles they had to overcome? 


2. What are the advantages and disadvantages of a full- 
blown versus a phased approach for system implemen- 
tations in general, and global ones in particular? How 
do you make the decision on which road to take? 


3. How important is it that all units in global organization 
speak the same business language, and use the same 
functions and business processes? How do you balance 
the competing needs for flexibility and consistency 
across operations? 


Princes Street headquarters. This center operates round the 
clock, providing multilingual support for customers across 
the globe. 

For Fonterra’s 200-member IS team, the new system 
means being exposed to areas of the business they tradi- 
tionally would not have been. “If they worked in this part 
of the business under the old structure, they tended to stay 
in that part of the business. But now we pool the resources 
together so it means they could be working on X, Y, or Z 
within any given period. They are given a lot more flexibil- 
ity and ability to learn the various parts of the business in 
the new model.” 

He believes this setup also helps in staff retention. “It 
does give us the ability to retain staff as opposed to having 
staff leave to go to other organizations to experience differ- 
ent types of skill sets.” If there is another thing James is em- 
pathic about, it is that these days at Fonterra, “There is no 
such thing as an IT project by itself.” 

“We sit down with the business in terms of our planning, 
and we align our plans to their plans.” He says there is now 
an “enterprise road map” that consists of all the activities the 
business wants to undertake over the next 18 months up to 
three years. 

What is his primary advice for IT professionals who wish 
to move on to chief information officer and other C-level 
roles? “Make sure that you understand the business that you 
work with.” He adds, “Keep a watchful eye on very, very 
competent people that you might need to hire one day to be 
part of a bigger team.” They could be people in your cur- 
rent organization or people you meet outside, in industry 
functions. 

Lastly, he says, “Never ever fear hiring someone in your 
organization that is smarter than you. You actually need a lot 
of smart people working around you.” 


Source: Adapted from Mary Brandel, “Reinsurance Group Simplifies on 
Global Scale with Administration System,” Computerworld, March 14, 
2005; and Divina Paredes, “Unifying Global Operations,” CIO Magazine, 
March 27, 2007. 


REAL WORLD ACTIVITIES 


1. Both organizations featured in the case have been quite 
successful with their global rollouts. Search the Internet 
for examples of less-than-thriving global or interna- 
tional system implementations. How do they compare 
to the ones in the case? What differences in the ap- 
proaches taken by the successful and unsuccessful cases 
do you think could account for the differences in out- 
come? Prepare a report and a presentation to share 
your findings with the rest of the class. 


2. Implementing major systems in global organizations, 
particularly when development is concentrated in head- 
quarters or a powerful country subsidiary, can cause a 
lot of resentment and frustration for the other units in 
the organization. Break into small groups with your 
classmates to discuss which approaches companies can 
take to ease these issues and incorporate all their units 
into the process. 


FIGURE 12.12 


The major dimensions 
of global e-business 
technology management. 


Cultural, 
Political, and 
Geoeconomic 
Challenges 
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Cultural, Political, 
and Geoeconomic 


Internet-Based 


Business 


_ Data 


Manage dispersed staff as portfolio teams. ON Semiconductor has IT staff 
that support sales in Slovakia, where ON has a factory; in Hong Kong, where ON 
has a major sales office; in Shenzhen, China, where a customer service center is lo- 
cated; and in Kuala Lumpur, Malaysia, at its regional development center. ON over- 
comes potential disconnects by having a single sales IT portfolio owner, based at 
headquarters in Phoenix, who sets objectives and distributes work to the members of 
that team no matter where they reside. 

Make the work meaningful. To keep morale high and turnover low, be sure 
that each remote location contributes to important projects. Don’t send remote 
workers a steady diet of maintenance. Pilkington suggests building a center of excel- 
lence in each remote location. 

Clearly defining the roles of remote groups can also help knit them to- 
gether. For example, global company leaders can hold meetings at all levels to dis- 
cuss the distinct purposes of corporate headquarters, the regions, and the local units. 
Knowing what their roles are in the larger picture and what they can expect from 
others “creates a sense of identity and purpose,” says Nariman Karimi, senior VP 
and CIO of DHL Asia Pacific. 

Bring remote staff to headquarters. ON Semiconductor brings its foreign- 
based employees to the United States to work on key initiatives and interact with 
other business units at corporate headquarters. This may not be a monetary reward, 
but in many cultures it represents an endorsement and source of pride. 

Foster communication across regional boundaries. Videoconferencing is 
an obvious tool to enhance global team communication, but it’s important to have 
in-person meetings as well. At DHL, Karimi, together with the regional board mem- 
bers, visits one of the top 10 sites around the Asia Pacific region each month; each gets 
at least one personal visit a year. The visits include time for the local unit to showcase 
itself, and there is also unstructured time for informal and personal interaction. 


Source: Adapted from Richard Pastore, “Global Team Management: It’s a Small World After All,” CIO Magazine, 
January 23, 2008. 


“Business as usual” is not good enough in global business operations. The same holds 
true for global e-business technology management. There are too many cultural, po- 
litical, and geoeconomic (geographic and economic) realities that must be confronted 
for a business to succeed in global markets. As we have just mentioned, global infor- 
mation technology management must focus on developing global business IT strate- 
gies and managing global e-business application portfolios, Internet technologies, 
platforms, databases, and systems development projects. Managers, however, must 
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Swimming in the 
Global Talent Pool 


also accomplish this task from a perspective and through methods that take into ac- 
count the cultural, political, and geoeconomic differences that exist when doing busi- 
ness internationally. 

For example, a major political challenge is that many countries have rules regu- 
lating or prohibiting transfer of data across their national boundaries (transborder 
data flows), especially personal information such as personnel records. Others severely 
restrict, tax, or prohibit imports of hardware and software. Still others have local con- 
tent laws that specify the portion of the value of a product that must be added in that 
country if it is to be sold there. Some countries have reciprocal trade agreements that 
require a business to spend part of the revenue it earns in a country in that nation’s 
economy. 

Geoeconomic challenges in global business and IT refer to the effects of geogra- 
phy on the economic realities of international business activities. The sheer physical 
distances involved are still a major problem, even in this day of Internet telecommuni- 
cations and jet travel. For example, it may still take too long to fly in specialists when 
IT problems occur in a remote site. It is still difficult to communicate in real time 
across the world’s 24 time zones. It is still difficult to get good-quality telephone and 
telecommunications service in many countries. There are still problems finding the 
job skills required in some countries or enticing specialists from other countries to live 
and work there. Finally, there are still problems (and opportunities) in the great differ- 
ences in the cost of living and labor costs in various countries. All of these geoeco- 
nomic challenges must be addressed when developing a company’s global business and 
IT strategies. 

Cultural challenges facing global business and IT managers include differences 
in languages, cultural interests, religions, customs, social attitudes, and political phi- 
losophies. Obviously, global IT managers must be trained and sensitized to such cul- 
tural differences before they are sent abroad or brought into a corporation’s home 
country. Other cultural challenges include differences in work styles and business re- 
lationships. For example, should you take your time to avoid mistakes or hurry to get 
something done early? Should you go it alone or work cooperatively? Should the most 
experienced person lead, or should leadership be shared? The answers to such ques- 
tions depend on the culture you are in and highlight the cultural differences that might 
exist in the global workplace. Let’s take a look at a real world example involving the 
global IT talent pool. 


When he was a 16-year-old student, Jeff Kiiza would never have imagined that 
10 years later he’d be writing code in Perl, PHP/MySQL, and AJAX for companies 
in the United States, Canada, Australia, and Spain—and that he’d be doing it from 
his home in Cordoba, Argentina. “Back then, it would have been a dream or science 
fiction,” he says. “But the availability of greater free-flowing bandwidth and compa- 
nies turning to the Internet have allowed it.” 

Hemang Dani is pretty amazed that in the past six months, he has boosted his 
income to $5,000 per month by working for companies in the United States, the 
United Kingdom, Germany, and Australia. Not bad, considering the low cost of liv- 
ing in his home city of Mumbai, India. Dani’s projects range from coding “shopping 
carts” and enabling credit card processing on Web sites to managing portals as a Web 
master. 

Dani and Kiiza have jumped with both feet into the global talent pool. Both 
worked for overseas organizations even before they joined Menlo Park, California— 
based oDesk Corp.’s online marketplace, which links programmers with businesses 
that need their services. Kiiza coded for a university in Tanzania, and Dani picked up 
work through GetaFreelancer.com, which is owned by a Swedish company called 
Innovate IT. 


Chapter 12 / Enterprise and Global Management of Information Technology @ 527 


Because there are more programmers like them every day in developing parts of 
the world, IT professionals in the United States are now competing in the global 
talent pool as well. While many U.S. companies today are still hiring globally only 
when their need is short-lived, or skills are scarce or too high-priced in the local or 
domestic labor pool, some are going global just to find the best of the best, no matter 
where they’re located, according to Kevin Wheeler, president of Global Learning 
Resources Inc., a recruiting consulting firm in Fremont, California. “Cisco, Microsoft, 
Google—these companies have clearly taken the position that they’re going where 
the talent is,” he says. 


Source: Adapted from Mary Brandel, “Swimming in the Global Talent Pool,” Computerworld, January 15, 2007. 


Global Businesses are moving away from international strategies in which foreign subsidiaries 
: are autonomous but depend on headquarters for new processes, products, and ideas, 
Busines S/ IT or global strategies, in which a company’s worldwide operations are closely managed 
Stra teg les by corporate headquarters. Instead, companies are moving toward a transnational 
strategy, where the company’s business depends heavily on its information systems 
and Internet technologies to help it integrate its global business activities. Instead of 
having independent IS units at its subsidiaries, or even a centralized IS operation 
directed from its headquarters, a transnational business tries to develop an integrated 
and cooperative worldwide hardware, software, and Internet-based architecture for its 
IT platform. Figure 12.13 compares the three approaches to global business/IT strategy. 
Figure 12.14 illustrates how transnational business and IT strategies have been imple- 

mented by global companies. 


FIGURE 12.13 Companies operating internationally are moving toward transnational business and IT strategies. 
Note some of the chief differences among international, global, and transnational business and IT strategies. 


Comparing Global Business/IT Strategies 


International Global Transnational 
e Autonomous operations e Global sourcing e Virtual business operations via 
e Region specific e Multiregional global alliances 
ae : ; , A ° 
e Vertical integration e Horizontal integration World markets and mass 
: customization 
e Specific customers e@ Some transparency of customers 


Global e-commerce and customer 


and production : 
service 


e Captive manufacturing 


z eet e A 
e Customer segmentation and Some cross regionalization : 


eg: ; ‘Transparent manufacturing 
dedication by region and plant 


e Global supply chain and logistics 


e Dynamic resource management 


Information Technology Characteristics 


e Stand-alone systems e Regional decentralization e Logically consolidated, physically 
distributed, Internet connected 


e Decentralized/no standards e Interface dependent 
e Heavy reliance on interfaces e Some consolidation of applications Common global data resources 
e Multiple systems, high redun- and use of common systems e Integrated global enterprise systems 


dancy, and duplication of services e Reduced duplication of operations © Internet, intranet, extranet, and 


and operations eo Same otic tl andad, Web-based applications 


e Lack of common systems and data e ‘Transnational IT policies and 
standards 
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FIGURE 12.14 Examples of how transnational business and IT strategies were implemented by global companies. 


Global Global Sourcing Global Customer 
Alliances and Logistics Service 
Examples British Airways/US Airways Benetton American Express 
KLM/Northwest Qantas/ 
American 
IT Environment Global network (online Global network, EPOS Global network linked from 
reservation system). terminals in 4,000 stores, local branches and local 
CAD/CAM in central merchants to the customer 
manufacturing, robots and database and medical or legal 
laser scanner in automated referrals database. 
warehouse. 


Results 


e Coordination of schedules @ Produce 2,000 sweaters per © Worldwide access to funds 


© Code sharing Sousa ee e “Global Assist” hotline 
© Coordination of flights z ro ae (ini stores in G Emergency credit card 


e Co-ownership 


replacement 
e Reduced inventories 


Lage a she e 24-hour customer service 
(just-in-time) 


Global 
Business/IT 
Applications 


FIGURE 12.15 


Some of the business 
reasons driving global 
business applications. 


The applications of information technology developed by global companies depend 
on their global business/IT strategies and their expertise and experience in IT. 
Their IT applications, however, also depend on a variety of global business drivers, 
that is, business requirements caused by the nature of the industry and its competitive 
or environmental forces. One example would be companies like airlines or hotel chains 
that have global customers who travel widely or have global operations. Such compa- 
nies need global IT capabilities for online transaction processing so that they can pro- 
vide fast, convenient service to their customers—or face losing them to their 
competitors. The economies of scale provided by global business operations are other 
business drivers that require the support of global IT applications. Figure 12.15 
summarizes some of the business requirements that make global IT a competitive 
necessity. 

Of course, many global IT applications, particularly finance, accounting, and office 
applications, have been in operation for many years. For example, most multinational 


Business Drivers of Global IT 


e Global Customers. Customers are people who may travel anywhere or companies 
with global operations. Global IT can help provide fast, convenient service. 


e Global Products. Products are the same throughout the world or are assembled by 
subsidiaries throughout the world. Global IT can help manage worldwide marketing 
and quality control. 


e Global Operations. Parts of a production or assembly process are assigned to sub- 
sidiaries based on changing economic or other conditions. Only global IT can support 
such geographic flexibility. 


e Global Resources. The use and cost of common equipment, facilities, and people are 
shared by subsidiaries of a global company. Global IT can keep track of such shared 
resources. 


e Global Collaboration. The knowledge and expertise of colleagues in a global company 
can be quickly accessed, shared, and organized to support individual or group efforts. 
Only global IT can support such enterprise collaboration. 


Colorcon Inc.: 
Benefits and 
Challenges of 
Global ERPs 


PS 2 
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companies have global financial budgeting, cash management systems, and office auto- 
mation applications such as fax and e-mail systems. As global operations expand and 
global competition heats up, however, there is increasing pressure for companies to 
install global e-commerce and e-business applications for their customers and suppliers. 
Examples include global e-commerce Web sites and customer service systems for cus- 
tomers, and global supply chain management systems for suppliers. In the past, such 
systems relied almost exclusively on privately constructed or government-owned tele- 
communications networks; now the explosive business use of the Internet, intranets, 
and extranets for e-commerce has made such applications much more feasible for global 
companies. 


Since Colorcon Inc. consolidated all of its global offices and seven manufacturing 
sites onto one ERP system in 2001, the benefits have been indisputable. The spe- 
cialty chemicals manufacturer has increased its annual inventory turns by 40 percent, 
closes its books each quarter more than 50 percent faster than it once did, and has 
improved its production lead times. “It was a significant improvement,” says CIO 
Perry Cozzone. 

Yet getting to a single, global instance has also been fraught with challenges for 
the West Point, Pennsylvania—based company. Those included cleansing and verify- 
ing data from legacy systems, standardizing business processes globally, and getting 
buy-in from business leaders in locales as disparate as Brazil, Singapore, and the 
United Kingdom. 

“Tt was hard work,” says Cozzone, who oversaw the final stages of the system 
implementation. Transitioning to a single, global instance of an ERP system is a 
heady challenge for large and midsize multinationals alike. For many organizations, 
the toughest challenge in moving to one ERP system is change management. “It’s a 
real struggle for many companies to have consistency around their business proc- 
esses” because of differences in regional business requirements, says Rob Karel, an 
analyst at Forrester Research Inc. 

Still, companies that have achieved a single instance say it’s worth the struggle to 
streamline financial reporting and increase the visibility of operations around the 
world because doing so allows executives to make decisions faster. 

‘The most common technical challenge that project teams face is verifying the 
integrity of legacy data and moving it to the ERP environment. “One of the lessons 
learned is that you can never spend enough time on ensuring data quality,” says 
Cozzone. Early in Colorcon’s project, when there were questions about the quality 
of a set of data, team members and executives didn’t always agree on what needed to 
be done. “There was inconsistency about how to measure quality and manage it,” 
says Cozzone. 

So the project team developed a data-quality dashboard to illustrate to busi- 
ness leaders why compromised data needed to be fixed before being entered into 
the new environment. The dashboard demonstrates, for instance, how poor- 
quality customer contact information could lead to an increase in erroneous orders. 
The dashboard includes steps that business users can take to correct faulty data, 
and it quantifies monthly business improvements achieved by reducing bad data. 
They also had to work through minor issues in retiring legacy systems and so- 
called ghost systems—those used in various business units but unknown to corpo- 
ime INIT. 

“We’re not a multibillion-dollar company, but we still had ghost systems,” says 
Cozzone. “We made these a high priority and got rid of them quickly.” 


Source: Adapted from Thomas Hoffman, “Global ERP: You Can Get There from Here, but Should You?” Computer- 
world, October 15, 2007. 
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Global IT 
Platforms 


FIGURE 12.16 


The top 10 issues in 
managing international data 
communications. 


The management of technology platforms (also called the technology infrastruc- 
ture) is another major dimension of global IT management—that is, managing the 
hardware, software, data resources, telecommunications networks, and computing 
facilities that support global business operations. The management of a global IT 
platform not only is technically complex but also has major political and cultural 
implications. 

For example, hardware choices are difficult in some countries because of high 
prices, high tariffs, import restrictions, long lead times for government approvals, 
lack of local service or spare parts, and lack of documentation tailored to local con- 
ditions. Software choices can also present unique problems. Software packages de- 
veloped in Europe may be incompatible with American or Asian versions, even 
when purchased from the same hardware vendor. Well-known U.S. software pack- 
ages may be unavailable because there is no local distributor or because the soft- 
ware publisher refuses to supply markets that disregard software licensing and 
copyright agreements. 

Managing international data communications networks, including Internet, in- 
tranet, extranet, and other networks, is a key global IT challenge. Figure 12.16 out- 
lines the top 10 international data communications issues as reported by IS executives 
at 300 Fortune 500 multinational companies. Notice how political issues dominate the 
top 10 listing over technology issues, clearly emphasizing their importance in the 
management of global telecommunications. 

Establishing computing facilities internationally is another global challenge. Com- 
panies with global business operations usually establish or contract with systems inte- 
grators for additional data centers in their subsidiaries in other countries. These data 
centers meet local and regional computing needs and even help balance global com- 
puting workloads through communications satellite links. Offshore data centers, how- 
ever, can pose major problems in headquarters’ support, hardware and software 
acquisition, maintenance, and security. That’s why many global companies turn to ap- 
plication service providers or systems integrators like EDS or IBM to manage their 
overseas operations. 


International Data Communications Issues 


Network Management Issues 


e Improving the operational efficiency of networks 
© Dealing with different networks 


e Controlling data communication security 


Regulatory Issues 


e Dealing with transborder data flow restrictions 
e Managing international telecommunication regulations 


e Handling international politics 


Technology Issues 


e Managing network infrastructure across countries 


e Managing international integration of technologies 


Country-Oriented Issues 


e Reconciling national differences 


e Dealing with international tariff structures 


Source: Adapted from Vincent S. Lai and Wingyan Chung, “Managing International Data Communications,” 
Communications of the ACM, March 2002, p. 91. 


Fidelity and 
Unisys: Working 
in a Worldwide 
Campus 
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The Internet as a 
Global IT Platform 
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Once upon a time, companies boasted of having offices in Manhattan, Munich, Madrid, 
Mumbai, and Manila. Each office managed its set of customers and suppliers, with 
a lot of “good advice” coming in from the head office. There was precious little 
governance or standardization. Paradoxically, the use of third-party service providers 
has catalyzed better governance and standards in captive or shared-services centers 
scattered in distant parts of the world. 

Boston-based Fidelity, the world’s largest mutual fund company, for example, has 
subsidiary offices in most countries, which service local markets; has captive centers 
in India to service its global operations; has outsourced to almost half a dozen third- 
party IT service providers; and itself functions as a human resources and benefits 
administration provider to companies such as General Motors and Novartis. 

There are multiple ways to implement the concept of a worldwide campus. Re- 
gardless of the company having globally dispersed teams working on disparate pieces 
of work, what binds these offices together is a defined, common architecture and a 
shared-enterprise objective. 

Such complexity in operations is nothing new; it has been happening in other 
industries for decades. In manufacturing, for instance, components may be produced 
in China and ‘Taiwan, assembled in Malaysia, and packaged in and shipped from 
China. All of these activities may be coordinated from the United States. “The serv- 
ices industry, and business process outsourcing (BPO) in general, is just starting to 
catch up with its manufacturing brethren,” says Brian Maloney, recently appointed as 
president of the newly formed Unisys Global Industries. Maloney has been CEO of 
AT&T Solutions and COO of Perot Systems. 

“In a worldwide campus communication is not as simple as having everybody in 
the same room and saying ‘this is what we will do today, tomorrow or next week.’ 
Now you have to deal with the distance, time differences and cultural differences— 
when you and I have a conversation, we may be using the same language but we may 
have different nuances to the words,” he says. 

“You need to have somebody who is close to the customer and the customer’s 
business processes. In day-to-day problems, you need somebody who can understand 
what the CIO and business unit head are wrestling with and translate that back to the 
people who are doing the system-designing code work in India,” notes Maloney. 
“This has to be an ongoing collaboration, on a day-to-day basis. The good news is 
that technology allows that. At AT&T Solutions, which offers IT services to internal 
and external customers, we took engineers from Asia, Europe and the U.S.A. and put 
them in the customer’s premises for a couple of weeks.” 


Source: Adapted from Juhi Bhambal, “Worldwide Campus,” InformationWeek, May 29, 2006. 


What makes the Internet and the World Wide Web so important for international busi- 
ness? This interconnected matrix of computers, information, and networks that reaches 
tens of millions of users in over one hundred countries is a business environment free 

of traditional boundaries and limits. Linking to an online global infrastructure offers 
companies unprecedented potential for expanding markets, reducing costs, and improving 
profit margins at a price that is typically a small percentage of the corporate communica- 
tions budget. The Internet provides an interactive channel for direct communication and 
data exchange with customers, suppliers, distributors, manufacturers, product developers, 
financial backers, information providers—in fact, with all parties involved in a given 
business venture. 


So the Internet and the World Wide Web have now become vital components 
in international business and commerce. Within a few years, the Internet, with its 
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Key questions for 
companies establishing e Will you have to develop a new navigational logic to accommodate cultural preferences? 


global Internet Web sites. e What content will you translate, and what content will you create from scratch to ad- 


dress regional competitors or products that differ from those in the United States? 


e Should your multilingual effort be an adjunct to your main site, or will you make it a sep- 
arate site, perhaps with a country-specific domain name? 


e What kinds of traditional and new media advertising will you have to do in each country 
to draw traffic to your site? 


e Will your site get so many hits that you’ll need to set up a server in a local country? 


@ What are the legal ramifications of having your Web site targeted at a particular country, 
such as laws on competitive behavior, treatment of children, or privacy? 


interconnected network of thousands of networks of computers and databases, has 
established itself as a technology platform free of many traditional international 
boundaries and limits. By connecting their businesses to this online global infrastruc- 
ture, companies can expand their markets, reduce communications and distribution 
costs, and improve their profit margins without massive cost outlays for new telecom- 
munications facilities. Figure 12.17 outlines key considerations for global e-commerce 
Web sites. 

The Internet, along with its related intranet and extranet technologies, provides a 
low-cost interactive channel for communications and data exchange with employees, 
customers, suppliers, distributors, manufacturers, product developers, financial back- 
ers, information providers, and so on. In fact, all parties involved can use the Internet 
and other related networks to communicate and collaborate to bring a business ven- 
ture to its successful completion. As Figure 12.18 illustrates, however, much work 
needs to be done to bring secure Internet access and e-commerce to more people in 
more countries, but the trend is clearly toward continued expansion of the Internet as 
it becomes a pervasive IT platform for global business. 


Global Data Global data access issues have been a subject of political controversy and technology bar- 


A | riers in global business operations for many years but have become more visible with the 
CCESS ISSUES growth of the Internet and the pressures of e-commerce. A major example is the issue of 


FIGURE 12.18 Current numbers of Internet users by world region. Note: Internet usage and population statistics, 
updated on March 24, 2005. 


World Internet Usage and Population Statistics 


Population Population Internet Usage, Usage Growth Penetration World 


World Regions (2005 Est.) (% of World) Latest Data 2000-2005 (%) (% Population) Users (%) 
Africa 900,465,411 14.0 13,468,600 198.3 15) 15 
Asia 3,612,363,165 56.3 302,257,003 164.4 8.4 34.0 
Europe 730,991,138 14 2595653, 144, ISO 35.5 29.2 
Middle East 2597499772 4.0 19,370,700 266.5 US 2.2 
North America 328,387,059 Soll 22B OT 104.9 67.4 24.9 
Latin America/Caribbean 546,917,192 8.5 56,224,957 Pale 10.3 6.3 
Oceania/Australia 33,443,449 0.5 16,269,080 355 48.6 1.8 
WORLD TOTAL 6,412,067,185 100.0 888,681,131 146.2 13.9 100.0 


Source: www.internetworldstats.com. 


FIGURE 12.19 


Key data privacy provisions 
of the agreement to protect 
the privacy of consumers in 
e-commerce transactions 
between the United States 
and the European Union. 


Europe: Tighter 
Laws Worry 
Security 
Professionals 
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U.S.-E.U. Data Privacy Requirements 


e Notice of purpose and use of data collected 


e Ability to opt out of third-party distribution of data 


e Access for consumers to their information 


e Adequate security, data integrity, and enforcement provisions 


transborder data flows (TDF), in which business data flow across international borders 
over the telecommunications networks of global information systems. Many countries 
view TDF as a violation of their national sovereignty because these data flows avoid cus- 
toms duties and regulations for the import or export of goods and services. Others view 
TDF as a violation of their laws to protect the local IT industry from competition or 
their labor regulations for protecting local jobs. In many cases, the data flow business 
issues that seem especially politically sensitive are those that affect the movement out of a 
country of personal data in e-commerce and human resource applications. 

Many countries, especially those in the European Union (E.U.), may view transbor- 
der data flows as a violation of their privacy legislation because, in many cases, data 
about individuals are being moved out of the country without stringent privacy safe- 
guards. For example, Figure 12.19 outlines the key provisions of a data privacy agree- 
ment between the United States and the European Union. The agreement exempts U.S. 
companies engaging in international e-commerce from E.U. data privacy sanctions if 
they join a self-regulatory program that provides E.U. consumers with basic information 
about, and control over, how their personal data are used. Thus, the agreement is said to 
provide a “safe harbor” for such companies from the requirements of the E.U.’s Data 
Privacy Directive, which bans the transfer of personal information on E.U. citizens to 
countries that do not have adequate data privacy protection. 


Moves by several European countries to tighten laws against computer hacking 
worry security professionals who often use the same tools as hackers but for legiti- 
mate purposes. The United Kingdom and Germany are among the countries that 
are considering revisions to their computer crime laws in line with the 2001 Con- 
vention on Cybercrime, a Europe-wide treaty, and with a similar European Union 
measure passed in early 2005. 

But security professionals are scrutinizing those revisions out of concern for how 
prosecutors and judges could apply the laws. Security professionals are especially 
concerned about cases where the revisions apply to programs that could be used for 
bad or good. Companies often use hacking programs to test the mettle of their own 
systems. 

“One useful utility in the wrong hands is a potentially malicious hacking tool,” 
says Graham Cluley, senior technology consultant at Sophos in Abingdon, England. 
‘The proposed revisions would make it illegal to create or supply a tool to someone 
who intends to use it for unauthorized computer access or modification. Likewise, 
the proposed changes to German law would also criminalize making and distributing 
hacking tools. The German government said the changes will bring it into compli- 
ance with the 2001 Convention on Cybercrime. Several German security companies 
are planning to lobby against the law, as they fear it could hamper those who test 
security systems, says Alexander Kornbrust, founder and chief executive officer of 
Red-Database-Security in Neunkirchen, Germany. For example, tools to check the 
strength of passwords, often freely distributed, could also be used by malicious hackers, 
he says. 
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Internet Access 
Issues 


FIGURE 12.20 


Countries that restrict or 
forbid Internet access by 
their citizens. 


“The security community is very unhappy with this approach,” Kornbrust says. “The 
concern is that the usage and possession of so-called hacker tools will become illegal.” 

The United Kingdom and Germany are trying to align their laws with Article 
6 of the convention, which bans the creation of computer programs for the pur- 
pose of committing cybercrime. So far, 43 countries have signed the convention, 
which indicates their willingness to revise their laws to comply. Fifteen have rati- 
fied the convention. After a country changes its laws, it can ratify the convention 
and put it into force. 


Source: Adapted from Dave Gradijan, “Euro Computer Crime Laws Have Security Pros Worried,” CSO Magazine, 
September 29, 2006. 


The Paris-based organization Reporters Without Borders (RSF) reports that there are 
45 countries that “restrict their citizens’ access to the Internet.” At its most fundamental, 
the struggle between Internet censorship and openness at the national level revolves 
around three main means: controlling the conduits, filtering the flows, and punishing the 
purveyors. In countries such as Burma, Libya, North Korea, Syria, and the countries of 
Central Asia and the Caucasus, Internet access is either banned or subject to tight limita- 
tions through government-controlled ISPs, says the RSF 


Figure 12.20 outlines the restrictions to public Internet access by the governments of 
the 20 countries deemed most restrictive by the Paris-based Reporters Without Borders 
(RSF). See their Web site at www.rsf.fr. 

So the Internet has become a global battleground over public access to data and 
information at business and private sites on the World Wide Web. Of course, this 
becomes a business issue because restrictive access policies severely inhibit the growth 
of e-commerce with such countries. Most of the rest of the world has decided that 
restricting Internet access is not a viable policy but in fact would hurt their countries’ 
opportunities for economic growth and prosperity. Instead, national and international 
efforts are being made to rate and filter Internet content deemed inappropriate or 
criminal, such as Web sites for child pornography or terrorism. In any event, countries 
that significantly restrict Internet access are also choosing to restrict their participa- 
tion in the growth of e-commerce. 

‘To RSF and others, these countries’ rulers face a losing battle against the Informa- 
tion Age. By denying or limiting Internet access, they stymie a major engine of eco- 
nomic growth. By easing access, however, they expose their citizenry to ideas that 
potentially might destabilize to the status quo. Either way, many people will get access 
to the electronic information they want. “In Syria, for example, people go to Lebanon 
for the weekend to retrieve their e-mail,” says Virginie Locussol, RSF’s desk officer for 
the Middle East and North Africa. 


Global Government Restrictions on Internet Access 


e High Government Access Fees 
Kazakhstan, Kyrgyzstan 


e Government-Monitored Access 
China, Iran, Saudi Arabia, Azerbaijan, Uzbekistan 


e Government-Filtered Access 
Belarus, Cuba, Iraq, Tunisia, Sierra Leone, 
Tajikistan, Turkmenistan, Vietnam 


e No Public Access Allowed 
Burma, Libya, North Korea 


Global 
Systems 
Development 


Systems 
Development 
Strategies 


Invensys PLC: 
Drawing Talent 
from Around the 
World for Software 
Development 
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Just imagine the challenges of developing efficient, effective, and responsive applications 
for business end users domestically. Then, multiply that by the number of countries and 
cultures that may use a global e-business system. That’s the challenge of managing global 
systems development. Naturally, there are conflicts over local versus global system re- 
quirements, as well as difficulties agreeing on common system features such as multilin- 
gual user interfaces and flexible design standards. All of this effort must take place in an 
environment that promotes involvement and “ownership” of a system by local end users. 

Other systems development issues arise from disturbances caused by systems im- 
plementation and maintenance activities. For example, “An interruption during a third 
shift in New York City will present midday service interruptions in Tokyo.” Another 
major development issue relates to the trade-offs between developing one system that 
can run on multiple computer and operating system platforms or letting each local site 
customize the software for its own platform. 

Other important global systems development issues are concerned with global 
standardization of data definitions. Common data definitions are necessary for sharing 
data among the parts of an international business. Differences in language, culture, 
and technology platforms can make global data standardization quite difficult. For 
example, a sale may be called an “order booked” in the United Kingdom, an “order 
scheduled” in Germany, and an “order produced” in France. Yet, businesses are mov- 
ing ahead to standardize data definitions and structures. By moving their subsidiaries 
into data modeling and database design, they hope to develop a global data architec- 
ture that supports their global business objectives. 


Several strategies can be used to solve some of the systems development problems that 
arise in global IT. The first strategy is to transform an application used in the home 
office into a global application. Often, the system that has the best version of an ap- 
plication will be chosen for global use. Another approach is to set up a multinational 
development team with key people from several subsidiaries to ensure that the system 
design meets the needs of local sites, as well as corporate headquarters. 

A third approach is called parallel development. That’s because parts of the system 
are assigned to different subsidiaries and the home office to develop at the same time, 
based on the expertise and experience at each site. Another approach is the concept of 
centers of excellence. In this approach, an entire system may be assigned for development 
to a particular subsidiary based on its expertise in the business or technical dimensions 
needed for successful development. A final approach that has rapidly become a major 
development option is to outsource the development work to global or offshore devel- 
opment companies that have the skills and experience required to develop global busi- 
ness/IT applications. Obviously, all of these approaches require development team 
collaboration and managerial oversight to meet the global needs of a business. So, 
global systems development teams are making heavy use of the Internet, intranets, 
groupware, and other electronic collaboration technologies. See Figure 12.21. 


It’s great being able to draw upon your best programmers from throughout the 
world. SimSci-Esscor, the industrial process simulation and control unit of Invensys 
PLC, will assign personnel from any of its offices to assemble the right team. “Our 
development projects operate in a virtual mode and gather people from multiple sites 
based on project needs,” says Joe Ayers, director of development services at SimSci- 
Esscor in Lake Forest, California. “It is common for projects to utilize developers 
from three different time zones in a ‘follow the sun’ development mode.” 

‘The approach allows Invensys to find the right talent for the project, and work is 
done in an efficient way. But managing those far-flung developers can be a night- 
mare. “Invensys had brought together multiple companies with different cultures 
and processes,” Ayers explains. “Some of the issues we have had to address include 
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FIGURE 12.21 An example of Internet-enabled collaboration in global IT systems development. Note the roles played 
by the client company, offshore outsource developer, global open-source community, and just-in-time development team. 
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Global 
open-source 
community 


Source: Adapted from Jon Udell, “Leveraging a Global Advantage,” Infoworld, April 21, 2003, p. 35. 


duplication of source code, multiple tools and processes in use, and limited network 
connectivity and reliability.” 

To tackle these issues, Invensys created a virtual development infrastructure for 135 
developers in five locations. To facilitate communication, it incorporated desktop- 
sharing tools, instant messaging, conference calling, and voice-over-IP technology. 

For working on the code itself, the company deployed three products from Tel- 
elogic AB in Malmo, Sweden: Synergy/CM for controlling project configuration 
items, Synergy/Change for controlling change requests, and Synergy/Distributed 
CM for synchronizing change requests and source code between databases at mul- 
tiple sites. It also implemented a wide-area file-sharing system from Availl Inc. in 
Andover, Massachusetts, for other documents. “With this development structure, 
we have the ability to add or remove changes to software builds at the last minute, 
with no project-delivery slips attributed to distributed development complexity over 
the last year,” says Ayers. “We’ve been able to lower project start-up time and 
project costs.” 

Experts say managing distributed development teams requires a mix of processes 
and tools. “Rarely is it a problem with the technology, though that used to be a major 
hurdle in the past,” says Dale Karolak, vice president of product development at 
Intier Automotive Inc. in Novi, Michigan, and author of Global Software Develop- 
ment: Managing Virtual Teams and Environments. “Most problems now are with com- 
munications, documentation and alignment.” Karolak says managers need to exert 
more discipline when it comes to scheduling and holding meetings and tracking 
project targets and spend more time visiting off-site locations for face-to-face meet- 
ings. Proper management also requires a greater awareness of potential problems. 

“Jump on problems right away. Don’t wait,” Karolak says. “Longer distances will 
cause longer delays in solving the issues if they are not addressed quickly.” 


Source: Adapted from Drew Robb, “Global Workgroups,” Computerworld, August 15, 2005. 
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Managing Information Technology. This can be 
viewed as managing three major components: (1) the 
joint development and implementation of e-business 
and IT strategies, (2) the development of e-business 
applications and the research and implementation of 
new information technologies, and (3) IT processes, 
professionals, and subunits within a company’s IT 
organization and IS function. 


Failures in IT Management. Information systems are 
not being used effectively or efficiently by many orga- 
nizations. The experiences of successful organizations 
reveal that the basic ingredient of high-quality informa- 
tion system performance is extensive and meaningful 
management, as well as user involvement in the govern- 
ance and development of IT applications. Thus, managers 
may serve on executive IT groups and create IS manage- 
ment functions within their business units. 


Managing Global IT. The international dimensions 

of managing global information technologies include 
dealing with cultural, political, and geoeconomic 
challenges posed by various countries; developing ap- 
propriate business and IT strategies for the global mar- 
ketplace; and developing a portfolio of global e-business 


and e-commerce applications and an Internet-based 
technology platform to support them. In addition, 
data access methods have to be developed and systems 
development projects managed to produce the global 
e-business applications that are required to compete 
successfully in the global marketplace. 


Global Business and IT Strategies and Issues. 
Many businesses are becoming global companies and 
moving toward transnational business strategies in 
which they integrate the global business activities of 
their subsidiaries and headquarters. This transition 
requires that they develop a global IT platform—that 
is, an integrated worldwide hardware, software, and 
Internet-based network architecture. Global companies 
are increasingly using the Internet and related tech- 
nologies as a major component of this IT platform to 
develop and deliver global IT applications that meet 
their unique global business requirements. Global IT 
and end-user managers must deal with limitations to 
the availability of hardware and software; restrictions on 
transborder data flows, Internet access, and movement 
of personal data; and difficulties with developing com- 
mon data definitions and system requirements. 


Key Terms and Concepts 


These are the key terms and concepts of this chapter. The page number of their first explanation is in parentheses. 


1 


oN ANH A 


. Application development 9. Global business drivers (528) 15. Managing information 
management (510) 10. Global information technology technology (504) 
. Business/IT planning process (507) management (522) 16. Offshoring (515) 


. Centralization or decentralization 


of IT (510) 


a. Data access issues (532) 17. Outsourcing (514) 
b. Systems development 18 


. System performance monitor (511) 


. Chargeback systems (511) Ass oe 19. Technology management (513) 
. Chief information officer (512) MS ances aaeeea 20. Transborder data flows (533) 

. Chief technology officer (513) 1211 pana (508) 21. Transnational strategy (527) 

_ Data center (511) 13. IT staff planning (512) 22; User services 6133 

. Downsizing (510) 14. Management involvement (518) 


Review Quiz 


Match one of the key terms and concepts listed previously with one of the brief examples or definitions that follow. Try to find 
the best answer, even though some seem to fit more than one term or concept. Defend your choices. 


—— l. Focuses on discovering innovative approaches to 


satisfying a company’s customer value and business 


value goals with the support of IT. 


—— 2. Concerned with the use of hardware, software, 


network, and IS personnel resources within the 
corporate or business unit. 


—— 3. Managing business/IT planning and the IS func- 


tion within a company. 


—— 4. Aconceptual design, or blueprint, of an organi- 


zation’s IS/IT functions, hardware, and software 
created by a strategic business/IT planning 
process. 
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5. Many organizations have both centralized and 
decentralized IT units. 


—— 6. Managing the creation and implementation of new 
business applications. 


—— 7. End users need liaison, consulting, and training 
services. 


—— 8. Involves recruiting, training, and retaining qualified 
IS personnel. 


—— 9. Corporate locations for computer system operations. 


—— 10. Rapidly changing technological developments 
must be anticipated, identified, and implemented. 


—— 11. A relocation of an organization’s business pro- 
cesses (including production/manufacturing) to a 
lower-cost location, usually overseas. 


—— 12. The executive responsible for strategic business/ 
IT planning and IT management. 


—— 13. The executive in charge of researching and imple- 
menting new information technologies. 


—— 14. Software that helps monitor and control computer 
systems in a data center. 


—— 15. The cost of IS services may be allocated back to 
end users. 


—— 16. Many business firms are replacing their mainframe 


systems with networked PCs and servers. 


____ 17. The purchase of goods or services from third-party 


partners that were previously provided internally. 


—— 18. Managing IT to support a company’s international 


business operations. 


___ 19. A business depends heavily on its information sys- 


tems and Internet technologies to help it integrate 
its global business activities. 


—— 20. Global customers, products, operations, resources, 


and collaboration. 


—— 21. Global telecommunications networks like 


the Internet move data across national 
boundaries. 


—— 22. Agreement is needed on common user interfaces 


and Web site design features in global IT. 


___ 23. Security requirements for personal information in 


corporate databases within a host country are a top 
concern. 


—— 24. Business managers should oversee IT decision 


making and projects that are critical to their busi- 
ness units’ success. 


Discussion Questions l 


1. What has been the impact of information technologies 
on the work relationships, activities, and resources of 
managers? 


2. What can business unit managers do about perfor- 
mance problems in the use of information technology 
and the development and operation of information sys- 
tems in their business units? 


3. Refer to the Real World Case about retiring CIOs and 
succession planning in the chapter. How would you bal- 
ance the development and mentoring of your executives 
and managers with your own job security and career 
planning? How would you make the decision that it is 
“time to move on”? 


4. How are Internet technologies affecting the structure 
and work roles of modern organizations? For example, 
will middle management wither away? Will companies 
consist primarily of self-directed project teams of 
knowledge workers? Explain your answers. 


5. Should the IS function in a business be centralized or 
decentralized? Use the Internet to find recent develop- 
ments to support your answer. 


. Refer to the Real World Case on Reinsurance Group 


of America and Fonterra in the chapter. Fonterra’s ap- 
proach to global development exposes IT professionals 
to a variety of business areas, functions, and processes. 
What are the advantages of this exposure for them? 
What are the challenges? 


. How might cultural, political, or geoeconomic chal- 


lenges affect a global company’s use of the Internet? 
Give several examples. 


. Will the increasing use of the Internet by firms with 


global business operations change their move toward a 
transnational business strategy? Explain. 


. How might the Internet, intranets, and extranets 


affect the business drivers or requirements responsi- 
ble for a company’s use of global IT, as shown in 
Figure 12.13? Give several examples to illustrate 
your answer. 


Analysis Exercises l 


1. Top-Rated Web Sites for Executives 
CEO Express 
Check out CEO Express (www.ceoexpress.com), a top- 
rated Web portal for busy executives. See Figure 12.22. 


The site provides links to top U.S. and international 
newspapers, business and technology magazines, and 
news services. Hundreds of links to business and tech- 
nology research sources and references are provided, 


FIGURE 12.22 
‘The CEO Express Web site. 
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as well as travel services, online shopping, and recre- 
ational Web sites. Premium services include e-mail, 
contact management, calendaring and scheduling, com- 
munity networking, and powerful information organiz- 
ing and sharing tools. 


a. Evaluate the CEO Express Web site as a source of 
useful links to business and technology news, analy- 
sis, and research sources for business executives and 
professionals. 

b. Compare CEO Express with Google News (news. 
google.com) and Google IG (www.google.com/ig). 
What advantages does CEO Express provide? 

c. Select the featured article from the “Editor’s Cor- 
ner.” What was the source? Summarize the article. 
Was it useful to you? 


. Information and Communications for 
Development 

Assessing Global Capabilities 

Over one billion people take their electrical and tele- 
communications systems for granted. However, for bil- 
lions more, the service-on-demand mentality remains a 
distant dream and Internet access only a rumor. Recog- 
nizing the need to promote global information and 
communications technologies (GICT), the World Bank 
has undertaken numerous technology infrastructure 
assessment and development projects. 


a. What is the World Bank (www.worldbank.org) do- 
ing to address third-world computer literacy 
needs? 

b. What is MIT (www.mit.edu) doing to help increase 
global computer literacy? 


3. Overseas Assignments 


Incompatible Electricity? 

Business travelers who need to remain connected face 
special challenges outside their home country, especially 
those who work out of their hotel rooms. Electricity 
varies by voltage, cycles, and electric-plug shape. Like- 
wise, telephone jacks may vary from country to country 
and, for the most part, American cell phones work only 
in America. 

If you find yourself on an overseas assignment, how 
will you keep your laptop computer charged? How will 
you access the Internet? Can you free yourself from ex- 
pensive hotel telephone surcharges? 

Pick a country to “visit” (your professor may assign 
one instead), and report on specific solutions to each 
question. Be sure to include the manufacturer and 
model number of any hardware you may require. Cite 
all your sources. 

a. What do you need to bring with you to keep your 
laptop computer charged? 

b. What do you need to bring with you to connect your 
laptop’s modem to the local telephone network? 

c. What will you use in place of your handy cell phone? 


a 


. Use a collaboration-enabled system such as Black- 
board, Web CT, Dreamweaver, or Front Page to 
merge, organize, and publish your results with the 
rest of your class to create an online resource. 


4. Knowledge Work on the Move 


Business Process Outsourcing 
As a result of the location independence of knowledge 
work, many organizations seek to lower their labor 
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costs by moving their digital operations overseas. When 
managers evaluate such opportunities, they must con- 
sider the following regional attributes: 


e Political and regulatory environment 
e Infrastructure (electrical, telecommunications) 
e Professionally skilled labor force 


e Information systems skilled labor force 


All prospective locations must have a supportive 
political and regulatory environment; however, varia- 
tions within the other three attributes will pose special 
limitations. For example, India has millions of well- 
educated workers but notoriously unreliable telecommu- 
nications and electrical grids. Organizations that set up 
outsourcing operations in India build their own islands 
of stability with backup power and satellite telecommu- 
nications systems. A region with a shortage of profes- 


sionally skilled labor may offer labor-intensive activities 
such as call centers or data entry instead, yet even these 
jobs require basic computer literacy. 

The value of services provided depends primarily 
on the expertise or creativity involved in its perfor- 
mance. List suitable job titles for each work characteris- 
tic below. Rank each item in order of the value 
provided. 


a. Digitize: Convert data or information into a digital 
form. 

b. Distribute: Process information in one direction or 
another based on strict rules and nondigital inputs 
(if the inputs were digital, a computer could proba- 
bly do the job). 

c. Analyze: Process information based on human 
expertise. 

d. Create: Create new information or products based 
on human expertise. 
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REAL WORLD 


IBM Corporation: Competing 


Globally by Offshoring IT Workers 
and Giving Away Technology 


ts IBM’s nightmare. In a conference room in Bangalore, a 

team of retail experts at software company Wipro are re- 

designing the consumer experience for a major U.S. retail 
chain. They’re methodically evaluating the checkout area. 
The client wants state-of-the-art processes, and Srikant 
Shankaranarayana, Wipro’s brainy, intense, 44-year-old gen- 
eral manager for retail solutions, is pushing his consultants 
and engineers to ask tough questions: Should salesclerks 
carry handheld transaction devices or stand at cash registers? 
Which merchandise should be tracked electronically? How 
much information needs to be in the database to ensure that 
discount promotions don’t last longer than necessary? 

Those are exactly the kinds of questions that IBM wants 
to ask its retail customers, and the fact that such companies 
as Louis Vuitton and ‘Target are turning to India for answers 
is not a good thing for IBM. Almost half of IBM’s revenues 
now come from such business/IT services, and only services 
promise to provide growth on the massive scale that IBM 
needs to make shareholders happy. Luckily for IBM, Wipro 
has only 100 retail consultants—so far. 

Meanwhile, IBM’s costs remain those of a mature First 
World corporation. It has approximately 260,000 expensive 
employees in the United States and other developed coun- 
tries (the other 60,000 are in lower-cost regions) and 164,000 
pensioned retirees, all quarterbacked from a gleaming mod- 
ern headquarters on 432 acres of pricey Westchester County 
real estate. 

Although they don’t put it quite this boldly, CEO Sam 
Palmisano and other top IBMers think they’re well on the 
way to solving the problem. Interviews with the CEO’s lieu- 
tenants reveal their strategy: It will not only challenge upstarts 
like Wipro directly by taking the low-cost model right back at 
them, but it also includes a dimension that is so original and 
so bold that it will either reenergize Big Blue’s profits or un- 
dermine its vaunted status as the biggest company in IT. 

Simply put, IBM is gambling that it can win by giving 
away crown jewels—precious intellectual property in the 
form of software, patents, and ideas. Spread enough of those 
riches around, the theory goes, and the entire industry will 
grow faster, opening new frontiers. That, in turn, should 
create opportunities for IBM to sell high-value products and 
services that meet the new demand. 

IBM’s response to the India threat has been swift. In 
April 2005, after first-quarter revenues from services came 
in unexpectedly weak and IBM disappointed Wall Street’s 
earnings expectations, the company eliminated 14,500 jobs, 
mostly in Europe. It was the biggest job cut in three years: 
The company shut its European headquarters and moved 
most of the surviving employees out to the field, to what 
Palmisano calls “client-facing positions.” 

Next, The New York Times reported that it obtained an in- 
ternal IBM memo that said the company would hire 14,000 
people in India this year. IBM calls the figure “exaggerated,” 


but newcomers in any number would add to an already surpri- 
singly large roster in developing countries. Of the program- 
mers who write custom code for IBM’s services group, about 
half—26,000 or so—are in India, Brazil, or China. “Strategic 
low-cost geographies” is the IBM lingo for such places. 

India already accounts for the largest number of [BMers 
outside the United States (it recently surpassed Japan). In 
2004, Big Blue acquired India’s Daksh eServices, whose 
6,000 employees operate call centers for companies like 
Amazon.com and Citicorp. Goldman Sachs calculates that 
by the end of next year, IBM Services’ head count in India 
will top 52,000. That would be more than one-fourth of all 
its services personnel and about one-sixth of IBMers world- 
wide. It would put IBM in India on a par with Wipro, the 
largest local software company, and it would make it bigger 
than Infosys and Tata Consultancy Services. 

Growth in the developing world is a natural part of imple- 
menting a “global delivery model” for services, says senior 
vice president Bob Moffat. In July, Palmisano reorganized 
services, naming the 49-year-old Moffat as one of three execu- 
tives who will run it jointly. Although the other two will over- 
see the delivery of services to clients, Moffat’s job is to find 
efficiencies. He spent the past three years taking billions of 
dollars in costs out of IBM’s physical supply chain—the deliv- 
ery of parts and goods to and from factories and then on to 
the customer. His mission now is to cut the cost of delivering 
services, even high-value ones, by tightening the “services 
supply chain.” Mostly, that means people; he must get the 
right ones to the right place at the right time. He has to ex- 
tract every last penny of value from IBM’s 260,000 developed- 
country employees if they’re going to stay on the payroll. 

Palmisano certainly sounds confident. In an e-mail to 
Fortune, he makes a remarkable claim: that by adopting the 
strategy that he calls, simply, “openness,” IBM has tapped a 
major new “spur to innovation itself.” The company lavishes 
some $5.7 billion a year on R&D. By sharing its discoveries 
wisely, Palmisano says, IBM will “make the pie bigger,” and 
the entire industry will grow faster. 

Collaborating with customers, and even rivals, to invent 
new technologies is a big part of this sharing plan, and the 
first fruits are already apparent. In hardware, IBM, Sony, 
and Toshiba have codeveloped a breakthrough chip called 
the Cell, which could eventually help transform all of IBM’s 
computers. In software, embracing Linux and other open- 
source technology has given IBM new platforms on which it 
is building almost all of its high-growth applications. 

The idea that giving things away makes the pie bigger 
for everybody is not IBM’s invention, of course. The open- 
source software movement that developed Linux is a good 
example. Says Palmisano: “This isn’t theory for us. Collabo- 
rative innovation today is crucial to every aspect of our busi- 
ness. We’ve learned how to deliver value within this kind of 
business system and how to make money.” 
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A walking, talking embodiment of that is Jim Stallings, 
Palmisano’s vice president for intellectual property and 
standards—a job Palmisano invented when he tapped Stall- 
ings for it last September. Stallings, 49, used to manage 
IBM’s work with the Linux community; now he’s the guy 
who figures out what Big Blue should give away and what it 
should keep. A buttoned-down former Marine Corps cap- 
tain and 14-year IBM veteran, he’s not the most likely high- 
tech Santa. Yet he’s almost hypnotically good at explaining 
how IBM's plan works. The giveaways to open-source soft- 
ware groups, customer groups, universities, and other IT 
companies are surprisingly extensive and diverse. 

IBM says there’s no way to attach a precise dollar value 
to its giveaways, but Fortune calculates they’re worth at least 
$150 million a year. Although sharing is not yet a universal 
part of its culture, the company has come a long way from 
the arrogant, standoffish, monopolistic IBM of yore. 

What’s in it for IBM? Big Blue seldom gives away a tech- 
nology unless it has intellectual property and expertise that 
will enable it to make money if the technology is widely 
adopted. When IBM hands out tools to retailers, it often 
sells them additional software and consulting services. 
What’s more, freebies themselves can be a potent weapon. 
Application-related software from Microsoft can be costly. 
An open-source version like Apache Geronimo is free and is 
the latest salvo in IBM’s open-source challenge to Microsoft. 
It has also embraced the Linux operating system, a formidable 


CASE STUDY QUESTIONS 


1. Do you agree with IBM’s employment response to 
competition from software development contractors in 
India, like Wipro, that are expanding into IT consulting 
services? Why or why not? 


2. Will IBM’s plan to give away some of its IT assets and 
intellectual property, as well as increase its support of 
open-source software products like Linux, be a success- 
ful growth strategy in the “brutally competitive market- 
place” in which it operates? Why or why not? 


3. Do you agree with IBM researchers’ assumption that 
IT will remain “hard to use, expensive, and labor- 
intensive, with customers continuing to need help 
solving business problems” for a long time to come? 
Should IBM bet its business on that assumption? 
Defend your answers to both questions. 


rival to Windows, as well as Firefox, a popular challenger to 
the Internet Explorer Web browser. 

IBM has also found giveaways to be a potent door opener 
abroad, where the company derives 63 percent of its reve- 
nues. Stallings has been to China four times this year and 
plans to go two more times in September. He’s working to 
convince policymakers and business leaders that using open- 
source software makes more sense than buying Microsoft's. 
This IBMer bearing gifts has found a receptive audience. 
Now IBM is helping build a giant network based largely on 
Linux to connect all of China’s libraries. 

All this sounds well and good, but the outcome is far from 
certain. IBM is in a brutally competitive marketplace with a 
long list of rivals going after the same customer dollar, but 
Palmisano argues that IBM will be able to create products and 
services that capitalize on new markets as they emerge. 

Yet even his own executives need to be convinced from 
time to time. Two years ago, some insiders fretted that IBM 
might be “shooting itself in the foot” by giving its ideas away. 
In the end, however, company researchers concluded that as 
long as IT remains hard to use, expensive, and labor-intensive, 
with customers continuing to need help solving business 
problems, IBM will have the opportunity to thrive. Any 
business computer user would guess that means forever. 


Source: Adapted from David Kirkpatrick, “IBM Shares Its Secrets,” Fortune, 
September 5, 2005. 


REAL WORLD ACTIVITIES 


1. Use the Internet to research news on the latest devel- 
opments in the competition to provide IT consulting 
services to businesses and governments. Check out 
IBM's performance, as well as major players like HP 
and Accenture, new entrants like Dell, and inter- 
national competitors like Wipro. Who appears to be 
winning or losing in this arena? What reasons can you 
uncover for the results you find? 


2. IBM eliminated 14,500 jobs, mostly in Europe, and 
then reportedly hired thousands of additional IT work- 
ers in India. Cutting high-cost jobs and then offshoring 
jobs to a subsidiary in a lower-cost country is a contro- 
versial business strategy being used by other global 
companies. Break into small groups with your class- 
mates to discuss the implications of this issue for your 
current or future career choices and the kinds of com- 
panies or organizations you would want to work for. 
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Accounting Information Systems Information systems 
that record and report business transactions and the flow of 
funds through an organization, and then produce financial 
statements. These statements provide information for the 
planning and control of business operations, as well as for 
legal and historical recordkeeping. 


Ada A programming language named after Augusta Ada 
Byron, considered the world’s first computer programmer. 
Developed for the U.S. Department of Defense as a 
standard high-order language. 


Ad Hoc Inquiries Unique, unscheduled, situation- 
specific information requests. 


Agile Competition The ability of a company to operate 
profitably in a competitive environment of continual and 
unpredictable changes in customer preferences, market 
conditions, and business opportunities. 


Algorithm A set of well-defined rules or processes for 
solving a problem in a finite number of steps. 


Analog Computer A computer that operates on data by 
measuring changes in continuous physical variables such 
as voltage, resistance, and rotation. Contrast with Digital 
Computer. 


Analytical Database A database of data extracted from 
operational and external databases to provide data tailored 
to online analytical processing, decision support, and 
executive information systems. 


Analytical Modeling Interactive use of computer-based 
mathematical models to explore decision alternatives using 
what-if analysis, sensitivity analysis, goal-seeking analysis, 
and optimization analysis. 

Applet A small, limited-purpose application program or 
small, independent module of a larger application program. 


Application Development See Systems Development. 


Application Generator A software package that supports 
the development of an application through an interactive 
terminal dialogue, where the programmer/analyst defines 
screens, reports, computations, and data structures. 


Application Portfolio A planning tool used to evaluate 
present and proposed information systems applications 

in terms of the amount of revenue or assets invested in 
information systems that support major business functions 
and processes. 


Applications Architecture A conceptual planning 
framework in which business applications of information 
technology are designed as an integrated architecture of 
enterprise systems that support strategic business initiatives 
and cross-functional business processes. 


Application Server System software that provides a 
middleware interface between an operating system and the 
application programs of users. 


Application Software Programs that specify the 
information processing activities required for the 
completion of specific tasks of computer users. Examples 


are electronic spreadsheet and word processing programs or 
inventory or payroll programs. 


Application-Specific Programs Application software 
packages that support specific applications of end users in 
business, science and engineering, and other areas. 


Arithmetic-Logic Unit (ALU) The unit of a computing 
system containing the circuits that perform arithmetic and 
logical operations. 


Artificial Intelligence (AI) A science and technology 
whose goal is to develop computers that can think, as 

well as see, hear, walk, talk, and feel. A major thrust is the 
development of computer functions normally associated 
with human intelligence, for example, reasoning, inference, 
learning, and problem solving. 


ASCII: American Standard Code for Information 
Interchange A standard code used for information 
interchange among data processing systems, 
communication systems, and associated equipment. 


Assembler A computer program that translates an 
assembler language into machine language. 


Assembler Language A programming language that 
utilizes symbols to represent operation codes and storage 
locations. 


Asynchronous A sequence of operations without a 
regular or predictable time relationship. Thus, operations 
do not happen at regular timed intervals, but an operation 
will begin only after a previous operation is completed. The 
data transmission involves the use of start and stop bits with 
each character to indicate the beginning and end of the 
character being transmitted. Contrast with Synchronous. 


Audit Trail The presence of media and procedures 

that allow a transaction to be traced through all stages of 
information processing, beginning with its appearance on 
a source document and ending with its transformation into 
information in a final output document. 


Automated Teller Machine (ATM) A special-purpose 
transaction terminal used to provide remote banking 
services. 


Back-End Processor ‘Typically, a smaller, general- 
purpose computer dedicated to database processing using 
a database management system (DBMS). Also called a 
database machine or server. 


Background Processing ‘The automatic execution of 
lower-priority computer programs when higher-priority 
programs are not using the resources of the computer 
system. Contrast with Foreground Processing. 


Backward-Chaining An inference process that justifies 
a proposed conclusion by determining if it will result when 
rules are applied to the facts in a given situation. 


Bandwidth ‘The frequency range of a telecommunications 
channel, which determines its maximum transmission rate. 
The speed and capacity of transmission rates are typically 
measured in bits per second (bps). Bandwidth is a function 


557 


558 © Glossary for Business Professionals 


of the telecommunications hardware, software, and media 
used by the telecommunications channel. 


Bar Codes Vertical marks or bars placed on merchandise 
tags or packaging that can be sensed and read by optical 
character-reading devices. The width and combination of 
vertical lines are used to represent data. 


Barriers to Entry ‘Technological, financial, or legal 
requirements that deter firms from entering an industry. 


BASIC: Beginner’s All-Purpose Symbolic Instruction 
Code A programming language developed at Dartmouth 
College and designed for programming by end users. 


Batch Processing A category of data processing in 
which data are accumulated into batches and processed 
periodically. Contrast with Real-Time Processing. 


Baud A unit of measurement used to specify data 
transmission speeds. It is a unit of signaling speed equal 
to the number of discrete conditions or signal events per 
second. In many data communications applications, it 
represents one bit per second. 


Binary Pertaining to a characteristic or property 
involving a selection, choice, or condition in which there 
are two possibilities, or pertaining to the number system 
that utilizes a base of 2. 


Biometric Controls Computer-based security methods 
that measure physical traits and characteristics such as 
fingerprints, voice prints, and retina scans. 


Bit A contraction of “binary digit.” It can have the value 
of either 0 or 1. 


Block A grouping of contiguous data records or other 
data elements that are handled as a unit. 


Branch A transfer of control from one instruction to 
another in a computer program that is not part of the normal 
sequential execution of the instructions of the program. 


Browser See Web Browser. 


Buffer ‘Temporary storage used when transmitting data 
from one device to another to compensate for a difference 
in rate of flow of data or time of occurrence of events. 


Bug A mistake or malfunction. 


Bulletin Board System (BBS) A service of online 
computer networks in which electronic messages, data files, 
or programs can be stored for other subscribers to read or 
copy. 

Bundling ‘The inclusion of software, maintenance, 
training, and other products or services in the price of a 
computer system. 


Bus A set of conducting paths for movement of data and 
instructions that interconnects the various components of 


the CPU. 


Business Ethics An area of philosophy concerned 
with developing ethical principles and promoting ethical 
behavior and practices in the accomplishment of business 
tasks and decision making. 


Business Intelligence (BI) A term primarily used in 
industry that incorporates a range of analytical and decision 
support applications in business including data mining, 
decision support systems, knowledge management systems, 
and online analytical processing. 

Business/IT Planning ‘The process of developing a 
company’s business vision, strategies, and goals, as well as 
how they will be supported by the company’s information 


technology architecture and implemented by its business 
application development process. 


Business Process Reengineering (BPR) Restructuring 
and transforming a business process by a fundamental 
rethinking and redesign to achieve dramatic improvements 
in cost, quality, speed, and so on. 


Byte A sequence of adjacent binary digits operated on as 
a unit and usually shorter than a computer word. In many 
computer systems, a byte is a grouping of eight bits that can 
represent one alphabetic or special character or that can be 
packed with two decimal digits. 


C A low-level structured programming language that 
resembles a machine-independent assembler language. 


C++ An object-oriented version of C that is widely used 
for software package development. 


Cache Memory A high-speed temporary storage area 
in the CPU for storing parts of a program or data during 
processing. 


Capacity Management ‘The use of planning and control 
methods to forecast and control information processing job 
loads, hardware and software usage, and other computer 
system resource requirements. 


Case-Based Reasoning Representing knowledge in 
an expert system’s knowledge base in the form of cases, 
that is, examples of past performance, occurrences, and 
experiences. 


Cathode Ray Tube (CRT) An electronic vacuum 
tube (television picture tube) that displays the output of a 
computer system. 


CD-ROM An optical disk technology for microcomputers 
featuring compact disks with a storage capacity of over 
500 megabytes. 


Cellular Phone Systems A radio communications 
technology that divides a metropolitan area into a 
honeycomb of cells to greatly increase the number of 
frequencies and thus the users that can take advantage of 
mobile phone service. 


Central Processing Unit (CPU) The unit ofa 
computer system that includes the circuits that control 
the interpretation and execution of instructions. In many 
computer systems, the CPU includes the arithmetic-logic 
unit, the control unit, and the primary storage unit. 


Change Management Managing the process of 
implementing major changes in information technology, 
business processes, organizational structures, and job 
assignments to reduce the risks and costs of change and 
optimize its benefits. 


Channel (1) A path along which signals can be sent. (2) A 
small special-purpose processor that controls the movement 
of data between the CPU and input/output devices. 


Chargeback Systems Methods of allocating costs to end- 
user departments on the basis of the information services 
rendered and information system resources utilized. 


Chat Systems Software that enables two or more 
users at networked PCs to carry on online, real-time text 
conversations. 


Check Bit A binary check digit: for example, a parity bit. 


Check Digit A digit in a data field that is utilized to 
check for errors or loss of characters in the data field as a 
result of data transfer operations. 


Checkpoint A place in a program where a check or a 
recording of data for restart purposes is performed. 


Chief Information Officer A senior management 
position that oversees all information technology for a firm 
concentrating on long-range information system planning 
and strategy. 


Client (1) An end user. (2) The end user’s networked 
microcomputer in client/server networks. (3) The version 
of a software package designed to run on an end user’s 
networked microcomputer, such as a Web browser client 
and a groupware client. 


Client/Server Network A computer network where 
end-user workstations (clients) are connected via 
telecommunications links to network servers and possibly 
to mainframe superservers. 


Clock A device that generates periodic signals utilized 
to control the timing of a computer. Also, a register whose 
contents change at regular intervals in such a way as to 
measure time. 


Coaxial Cable A sturdy copper or aluminum wire 
wrapped with spacers to insulate and protect it. Groups 
of coaxial cables may also be bundled together in a bigger 
cable for ease of installation. 


COBOL: COmmon Business Oriented Language A 
widely used business data processing programming language. 


Code Computer instructions. 


Cognitive Science An area of artificial intelligence that 
focuses on researching how the human brain works and 
how humans think and learn, to apply such findings to the 
design of computer-based systems. 


Cognitive Styles Basic patterns in how people handle 
information and confront problems. 


Cognitive Theory ‘Theories about how the human brain 


works and how humans think and learn. 


Collaborative Work Management Tools Software that 
helps people accomplish or manage joint work activities. 


Communications Satellite Earth satellites placed in 
stationary orbits above the equator that serve as relay stations 
for communications signals transmitted from earth stations. 


Competitive Advantage Developing products, services, 
processes, or capabilities that give a company a superior 
business position relative to its competitors and other 
competitive forces. 


Competitive Forces A firm must confront (1) rivalry of 
competitors within its industry, (2) threats of new entrants, 
(3) threats of substitutes, (4) the bargaining power of 
customers, and (5) the bargaining power of suppliers. 


Competitive Strategies A firm can develop cost 
leadership, product differentiation, and business innovation 
strategies to confront its competitive forces. 


Compiler A program that translates a high-level 
programming language into a machine-language program. 
Computer A device that has the ability to accept data; 
internally store and execute a program of instructions; 
perform mathematical, logical, and manipulative operations 
on data; and report the results. 


Computer-Aided Design (CAD) The use of computers 
and advanced graphics hardware and software to 

provide interactive design assistance for engineering and 
architectural design. 
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Computer-Aided Engineering (CAE) The use of 
computers to simulate, analyze, and evaluate models of 
product designs and production processes developed using 
computer-aided design methods. 


Computer-Aided Manufacturing (CAM) The use 
of computers to automate the production process and 
operations of a manufacturing plant. Also called factory 
automation. 


Computer-Aided Planning (CAP) The use of software 
packages as tools to support the planning process. 


Computer-Aided Software Engineering (CASE) Same 
as Computer-Aided Systems Engineering, but emphasizing 
the importance of software development. 


Computer-Aided Systems Engineering (CASE) Using 
software packages to accomplish and automate many of the 
activities of information systems development, including 
software development or programming. 


Computer Application The use of a computer to solve 

a specific problem or accomplish a particular job for an end 
user. For example, common business computer applications 
include sales order processing, inventory control, and payroll. 


Computer-Assisted Instruction (CAI) The use of 
computers to provide drills, practice exercises, and tutorial 
sequences to students. 


Computer-Based Information System An information 
system that uses computer hardware and software to 
perform its information processing activities. 


Computer Crime Criminal actions accomplished 
through the use of computer systems, especially with intent 
to defraud, destroy, or make unauthorized use of computer 
system resources. 


Computer Ethics A system of principles governing the 
legal, professional, social, and moral responsibilities of 
computer specialists and end users. 


Computer Generations Major stages in the historical 
development of computing. 


Computer Graphics Using computer-generated images 
to analyze and interpret data, present information, and 
create computer-aided design and art. 


Computer Industry ‘The industry composed of firms 
that supply computer hardware, software, and services. 


Computer-Integrated Manufacturing (CIM) An 
overall concept that stresses that the goals of computer 
use in factory automation should be to simplify, automate, 
and integrate production processes and other aspects of 
manufacturing. 


Computer Matching Using computers to screen and 
match data about individual characteristics provided by 

a variety of computer-based information systems and 
databases to identify individuals for business, government, 
or other purposes. 


Computer Monitoring Using computers to monitor the 
behavior and productivity of workers on the job and in the 
workplace. 


Computer Program A series of instructions or 
statements in a form acceptable to a computer, prepared to 
achieve a certain result. 


Computer System Computer hardware as a system of 
input, processing, output, storage, and control components. 
Thus, a computer system consists of input and output 
devices, primary and secondary storage devices, the central 
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processing unit, the control unit within the CPU, and other 
peripheral devices. 


Computer Terminal Any input/output device connected 
by telecommunications links to a computer. 


Computer Virus or Worm Program code that copies 

its destructive program routines into the computer systems 
of anyone who accesses computer systems that have 

used the program, or anyone who uses copies of data or 
programs taken from such computers. This spreads the 
destruction of data and programs among many computer 
users. Technically, a virus will not run unaided but must be 
inserted into another program, whereas a worm is a distinct 
program that can run unaided. 


Concurrent Processing ‘The generic term for the 
capability of computers to work on several tasks at the 
same time, that is, concurrently. This may involve specific 
capabilities such as overlapped processing, multiprocessing, 
multiprogramming, multitasking, and parallel processing. 


Connectivity The degree to which hardware, software, 
and databases can be easily linked together in a 
telecommunications network. 


Control (1) The systems component that evaluates 
feedback to determine whether the system is moving 
toward the achievement of its goal and then makes 

any necessary adjustments to the input and processing 
components of the system to ensure that proper output 
is produced. (2) A management function that involves 
observing and measuring organizational performance 
and environmental activities and modifying the plans and 
activities of the organization when necessary. 


Control Listing A detailed report that describes each 
transaction occurring during a period. 


Control Totals Accumulating totals of data at multiple 
points in an information system to ensure correct 
information processing. 


Control Unit A subunit of the central processing unit 
that controls and directs the operations of the computer 
system. The control unit retrieves computer instructions 
in proper sequence, interprets each instruction, and then 
directs the other parts of the computer system in their 
implementation. 


Conversion ‘The process in which the hardware, 
software, people, network, and data resources of an old 
information system must be converted to the requirements 
of a new information system. This usually involves a 
parallel, phased, pilot, or plunge conversion process from 
the old to the new system. 


Cooperative Processing Information processing that 
allows the computers in a distributed processing network to 
share the processing of parts of an end user’s application. 


Cost/Benefit Analysis Identifying the advantages or 
benefits and the disadvantages or costs of a proposed 
solution. 


Critical Success Factors A small number of key 

factors that executives consider critical to the success of 
the enterprise. These are key areas in which successful 
performance will assure the success of the organization and 
attainment of its goals. 


Cross-Functional Information Systems Information 
systems that are integrated combinations of business 
information systems, thus sharing information resources 
across the functional units of an organization. 


Cursor A movable point of light displayed on most video 
display screens to assist the user in the input of data. 


Customer Relationship Management (CRM) A 
cross-functional e-business application that integrates and 
automates many customer serving processes in sales, direct 
marketing, account and order management, and customer 
service and support. 


Cybernetic System A system that uses feedback and 
control components to achieve a self-regulating capability. 


Cylinder An imaginary vertical cylinder consisting of the 
vertical alignment of tracks on each surface of magnetic 


disks that are accessed simultaneously by the read/write 
heads of a disk drive. 


Data Facts or observations about physical phenomena or 
business transactions. More specifically, data are objective 
measurements of the attributes (characteristics) of entities 
such as people, places, things, and events. 


Data Administration A data resource management 
function that involves the establishment and enforcement 
of policies and procedures for managing data as a strategic 
corporate resource. 


Database An integrated collection of logically related 
data elements. A database consolidates many records 
previously stored in separate files so that a common pool of 
data serves many applications. 


Database Administration A data resource management 
function that includes responsibility for developing and 
maintaining the organization’s data dictionary, designing 
and monitoring the performance of databases, and 
enforcing standards for database use and security. 


Database Administrator A specialist responsible for 
maintaining standards for the development, maintenance, 
and security of an organization’s databases. 


Database Maintenance ‘The activity of keeping a 
database up to date by adding, changing, or deleting data. 


Database Management Approach An approach to 

the storage and processing of data in which independent 
files are consolidated into a common pool, or database, of 
records available to different application programs and end 
users for processing and data retrieval. 


Database Management System (DBMS) A set of 
computer programs that controls the creation, maintenance, 
and utilization of the databases of an organization. 


Database Processing Utilizing a database for data 
processing activities such as maintenance, information 
retrieval, or report generation. 


Data Center An organizational unit that uses centralized 
computing resources to perform information processing 
activities for an organization. Also known as a computer 
center. 


Data Conferencing Users at networked PCs can view, 
mark up, revise, and save changes to a shared whiteboard of 
drawings, documents, and other material. 


Data Conversion Converting data into new data formats 
required by a new business application and its software and 
databases. Also includes correcting incorrect data, filtering 
out unwanted data, and consolidating data into new 
databases and other data subsets. 


Data Design The design of the logical structure of 
databases and files to be used by a proposed information 
system. This design produces detailed descriptions of the 


entities, relationships, data elements, and integrity rules for 
system files and databases. 


Data Dictionary A software module and database 
containing descriptions and definitions concerning the 
structure, data elements, interrelationships, and other 
characteristics of a database. 


Data Entry ‘The process of converting data into a form 
suitable for entry into a computer system. Also called data 
capture or input preparation. 


Data Flow Diagram A graphic diagramming tool that 
uses a few simple symbols to illustrate the flow of data 
among external entities, processing activities, and data 
storage elements. 


Data Management Control program functions 
that provide access to data sets, enforce data storage 
conventions, and regulate the use of input/output devices. 


Data Mining Using special purpose software to analyze 
data from a data warehouse to find hidden patterns and 
trends. 


Data Model A conceptual framework that defines the 
logical relationships among the data elements needed to 
support a basic business or other process. 


Data Modeling A process in which the relationships 
between data elements are identified and defined to develop 
data models. 


Data Planning A corporate planning and analysis 
function that focuses on data resource management. 

It includes the responsibility for developing an overall 
information policy and data architecture for the firm’s data 
resources. 


Data Processing ‘The execution of a systematic sequence 
of operations performed on data to transform them into 
information. 


Data Resource Management A managerial activity that 
applies information systems technology and management 
tools to the task of managing an organization’s data 
resources. Its three major components are database 
administration, data administration, and data planning. 


Data Warehouse An integrated collection of data 
extracted from operational, historical, and external 
databases and cleaned, transformed, and cataloged for 
retrieval and analysis (data mining) to provide business 
intelligence for business decision making. 


Debug To detect, locate, and remove errors from a 
program or malfunctions from a computer. 


Decision Support System (DSS) An information system 
that utilizes decision models, a database, and a decision 
maker’s own insights in an ad hoc, interactive analytical 
modeling process to reach a specific decision by a specific 
decision maker. 


Demand Reports and Responses Information provided 
whenever a manager or end user demands it. 


Desktop Publishing The use of microcomputers, laser 
printers, and page makeup software to produce a variety 
of printed materials that were formerly produced only by 
professional printers. 


Desktop Videoconferencing ‘The use of end-user 
computer workstations to conduct two-way interactive 
video conferences. 


Development Centers Systems development consultant 
groups formed to serve as consultants to the professional 
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programmers and systems analysts of an organization to 
improve their application development efforts. 


Digital Computer A computer that operates on digital 
data by performing arithmetic and logical operations on the 
data. Contrast with Analog Computer. 


Digitizer A device that is used to convert drawings and 
other graphic images on paper or other materials into 
digital data that are entered into a computer system. 


Direct Access A method of storage in which each storage 
position has a unique address and can be individually 
accessed in approximately the same period without having 
to search through other storage positions. Same as Random 
Access. Contrast with Sequential Access. 


Direct Access Storage Device (DASD) A storage device 
that can directly access data to be stored or retrieved, for 
example, a magnetic disk unit. 


Direct Data Organization A method of data 
organization in which logical data elements are distributed 
randomly on or within the physical data medium. For 
example, logical data records distributed randomly on 

the surfaces of a magnetic disk file. Also called direct 
organization. 


Direct Input/Output Methods such as keyboard entry, 
voice input/output, and video displays that allow data to be 
input into or output from a computer system without the 
use of machine-readable media. 


Disaster Recovery Methods for ensuring that an 
organization recovers from natural and human-caused 
disasters that have affected its computer-based operations. 


Discussion Forum An online network discussion 
platform to encourage and manage online text discussions 
over a period among members of special interest groups or 
project teams. 


Distributed Databases ‘The concept of distributing 
databases or portions of a database at remote sites where 
the data are most frequently referenced. Sharing of data is 
made possible through a network that interconnects the 
distributed databases. 


Distributed Processing A form of decentralization 

of information processing made possible by a network 

of computers dispersed throughout an organization. 
Processing of user applications is accomplished by several 
computers interconnected by a telecommunications 
network, rather than relying on one large centralized 
computer facility or on the decentralized operation of 
several independent computers. 


Document (1) A medium on which data have been 
recorded for human use, such as a report or invoice. (2) In 
word processing, a generic term for text material such as 
letters, memos, and reports. 


Documentation A collection of documents or information 
that describes a computer program, information system, or 
required data processing operations. 


Downsizing Moving to smaller computing platforms, 
such as from mainframe systems to networks of personal 
computers and servers. 


Downtime The time interval during which a device is 
malfunctioning or inoperative. 
DSS Generator A software package for a decision 


support system that contains modules for database, model, 
and dialogue management. 
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Duplex In communications, pertains to a simultaneous 
two-way independent transmission in both directions. 


EBCDIC: Extended Binary Coded Decimal Interchange 
Code An eight-bit code that is widely used by mainframe 
computers. 


Echo Check A method of checking the accuracy of data 
transmission in which the received data are returned to the 
sending device for comparison with the original data. 


e-Commerce Marketplaces Internet, intranet, and 
extranet Web sites and portals hosted by individual 
companies, consortiums of organizations, or third-party 
intermediaries providing electronic catalog, exchange, and 
auction markets to unite buyers and sellers to accomplish 
e-commerce transactions. 


Economic Feasibility Whether expected cost savings, 
increased revenue, increased profits, and reductions in 
required investment exceed the costs of developing and 
operating a proposed system. 


EDI: Electronic Data Interchange ‘The automatic 
electronic exchange of business documents between the 
computers of different organizations. 


Edit ‘To modify the form or format of data. For example, 
to insert or delete characters such as page numbers or 
decimal points. 


Edit Report A report that describes errors detected 
during processing. 


EFT: Electronic Funds Transfer The development 
of banking and payment systems that transfer funds 
electronically instead of using cash or paper documents 
such as checks. 


Electronic Business (e-Business) ‘The use of 
Internet technologies to internetwork and empower 
business processes, electronic commerce, and enterprise 
communication and collaboration within a company 
and with its customers, suppliers, and other business 
stakeholders. 


Electronic Commerce (e-Commerce) The buying 
and selling, marketing and servicing, and delivery and 
payment of products, services, and information over the 
Internet, intranets, extranets, and other networks, between 
an internetworked enterprise and its prospects, customers, 
suppliers, and other business partners. Includes business- 
to-consumer (B2C), business-to-business (B2B), and 
consumer-to-consumer (C2C) e-commerce. 


Electronic Communications Tools Software that helps 
communicate and collaborate with others by electronically 
sending messages, documents, and files in data, text, voice, 
or multimedia over the Internet, intranets, extranets, and 
other computer networks. 


Electronic Conferencing Tools Software that 

helps networked computer users share information and 
collaborate while working together on joint assignments, 
no matter where they are located. 


Electronic Data Processing (EDP) ‘The use of 
electronic computers to process data automatically. 


Electronic Document Management An image 
processing technology in which an electronic document 
may consist of digitized voice notes and electronic graphics 
images, as well as digitized images of traditional documents. 


Electronic Mail Sending and receiving text messages 
between networked PCs over telecommunications 


networks. E-mail can also include data files, software, and 
multimedia messages and documents as attachments. 


Electronic Meeting Systems (EMS) Using a meeting 
room with networked PCs, a large-screen projector, and 
EMS software to facilitate communication, collaboration, 
and group decision making in business meetings. 


Electronic Payment Systems Alternative cash or credit 
payment methods using various electronic technologies to 
pay for products and services in electronic commerce. 


Electronic Spreadsheet Package An application 
program used as a computerized tool for analysis, planning, 
and modeling that allows users to enter and manipulate data 
into an electronic worksheet of rows and columns. 


Emulation ‘To imitate one system with another so 
that the imitating system accepts the same data, executes 
the same programs, and achieves the same results as the 
imitated system. 


Encryption ‘To scramble data or convert them, prior to 
transmission, to a secret code that masks the meaning of the 
data to unauthorized recipients. Similar to enciphering. 


End User Anyone who uses an information system or the 
information it produces. 


End-User Computing Systems Computer-based 
information systems that directly support both the 
operational and managerial applications of end users. 


Enterprise Application Integration (EAI) A cross- 
functional e-business application that integrates front- 
office applications like customer relationship management 
with back-office applications like enterprise resource 
management. 


Enterprise Collaboration Systems The use of groupware 
tools and the Internet, intranets, extranets, and other 
computer networks to support and enhance communication, 
coordination, collaboration, and resource sharing among 
teams and workgroups in an internetworked enterprise. 


Enterprise Information Portal A customized and 
personalized Web-based interface for corporate intranets 
and extranets that gives qualified users access to a variety 
of internal and external e-business and e-commerce 
applications, databases, software tools, and information 
services. 


Enterprise Knowledge Portal An enterprise 
information portal that serves as a knowledge management 
system by providing users with access to enterprise 
knowledge bases. 


Enterprise Model A conceptual framework that defines 
the structures and relationships of business processes and 
data elements, as well as other planning structures, such as 
critical success factors and organizational units. 


Enterprise Resource Planning (ERP) Integrated 
cross-functional software that reengineers manufacturing, 
distribution, finance, human resources, and other basic 
business processes of a company to improve its efficiency, 
agility, and profitability. 

Entity Relationship Diagram (ERD) A data planning 
and systems development diagramming tool that models 
the relationships among the entities in a business process. 


Entropy The tendency of a system to lose a relatively 
stable state of equilibrium. 


Ergonomics The science and technology emphasizing 
the safety, comfort, and ease of use of human-operated 


machines such as computers. The goal of ergonomics is to 
produce systems that are user-friendly: safe, comfortable, 
and easy to use. Ergonomics is also called human factors 
engineering. 

Exception Reports Reports produced only when 
exceptional conditions occur, or reports produced 
periodically that contain information only about 
exceptional conditions. 


Executive Information System (EIS) An information 
system that provides strategic information tailored to the 
needs of executives and other decision makers. 


Executive Support System (ESS) An executive 
information system with additional capabilities, including 
data analysis, decision support, electronic mail, and 
personal productivity tools. 


Expert System (ES) A computer-based information 
system that uses its knowledge about a specific complex 
application area to act as an expert consultant to users. 
The system consists of a knowledge base and software 
modules that perform inferences on the knowledge and 
communicate answers to a user’s questions. 


Extranet A network that links selected resources of a 
company with its customers, suppliers, and other business 
partners, using the Internet or private networks to link the 
organizations’ intranets. 


Facilities Management The use of an external service 
organization to operate and manage the information 
processing facilities of an organization. 


Fault Tolerant Systems Computers that have multiple 
central processors, peripherals, and system software and 
that are able to continue operations even if there is a major 
hardware or software failure. 


Faxing (Facsimile) ‘Transmitting and receiving images of 
documents over the telephone or computer networks using 
PCs or fax machines. 


Feasibility Study A preliminary study that investigates 
the information needs of end users and the objectives, 
constraints, basic resource requirements, cost/benefits, and 
feasibility of proposed projects. 

Feedback (1) Data or information concerning the 
components and operations of a system. (2) The use of part 
of the output of a system as input to the system. 


Fiber Optics The technology that uses cables 
consisting of very thin filaments of glass fibers that can 
conduct the light generated by lasers for high-speed 
telecommunications. 


Field A data element that consists of a grouping of 
characters that describe a particular attribute of an entity. 
For example, the name field or salary field of an employee. 


Fifth Generation The next generation of computers. 
Major advances in parallel processing, user interfaces, and 
artificial intelligence may provide computers that will be 
able to see, hear, talk, and think. 


File A collection of related data records treated as a unit. 
Sometimes called a data set. 


File Management Controlling the creation, deletion, 
access, and use of files of data and programs. 


File Processing Organizing data into specialized files 

of data records designed for processing only by specific 
application programs. Contrast with Database Management 
Approach. 
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Financial Management Systems Information systems 
that support financial managers in the financing of a 
business and the allocation and control of financial 
resources. These include cash and securities management, 
capital budgeting, financial forecasting, and financial 
planning. 

Firewall Computers, communications processors, and 
software that protect computer networks from intrusion by 
screening all network traffic and serving as a safe transfer 
point for access to and from other networks. 


Firmware The use of microprogrammed read-only 
memory circuits in place of hard-wired logic circuitry. See 
also Microprogramming. 


Floating Point Pertaining to a number representation 
system in which each number is represented by two sets 

of digits. One set represents the significant digits or fixed- 
point “base” of the number, while the other set of digits 
represents the “exponent,” which indicates the precision of 
the number. 


Floppy Disk A small plastic disk coated with iron oxide 
that resembles a small phonograph record enclosed in a 
protective envelope. It is a widely used form of magnetic 
disk media that provides a direct access storage capability 
for microcomputer systems. 


Flowchart A graphical representation in which symbols 
are used to represent operations, data, flow, logic, 
equipment, and so on. A program flowchart illustrates the 
structure and sequence of operations of a program, whereas 
a system flowchart illustrates the components and flows of 
information systems. 


Foreground Processing ‘The automatic execution of the 
computer programs that have been designed to preempt 
the use of computing facilities. Contrast with Background 
Processing. 


Format The arrangement of data on a medium. 


FORTRAN: FORmula TRANslation A high-level 
programming language widely utilized to develop computer 
programs that perform mathematical computations for 
scientific, engineering, and selected business applications. 


Forward Chaining An inference strategy that reaches 
a conclusion by applying rules to facts to determine if any 
facts satisfy a rule’s conditions in a particular situation. 


Fourth-Generation Languages (4GL) Programming 
languages that are easier to use than high-level languages 
such as BASIC, COBOL, or FORTRAN. They are also 
known as nonprocedural, natural, or very high-level 
languages. 


Frame A collection of knowledge about an entity or other 
concept consisting of a complex package of slots, that is, 
data values describing the characteristics or attributes of an 
entity. 

Frame-Based Knowledge Knowledge represented in the 
form of a hierarchy or network of frames. 


Front-End Processor ‘Typically a smaller, general- 
purpose computer that is dedicated to handling data 
communications control functions in a communications 
network, thus relieving the host computer of these 
functions. 


Functional Business Systems Information systems 
within a business organization that support one of the 
traditional functions of business such as marketing, finance, 
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or production. Functional business systems can be either 
operations or management information systems. 


Functional Requirements ‘The information system 
capabilities required to meet the information needs of end 
users. Also called system requirements. 


Fuzzy Logic Systems Computer-based systems that can 
process data that are incomplete or only partially correct, 
that is, fuzzy data. Such systems can solve unstructured 
problems with incomplete knowledge, as humans do. 


General-Purpose Application Programs Programs that 
can perform information processing jobs for users from all 
application areas. For example, word processing programs, 
electronic spreadsheet programs, and graphics programs 
can be used by individuals for home, education, business, 
scientific, and many other purposes. 


General-Purpose Computer A computer that is 
designed to handle a wide variety of problems. Contrast 
with Special-Purpose Computer. 


Generate ‘To produce a machine-language program 
for performing a specific data processing task based on 
parameters supplied by a programmer or user. 


Genetic Algorithm An application of artificial 
intelligence software that uses Darwinian (survival of the 
fittest) randomizing and other functions to simulate an 
evolutionary process that can yield increasingly better 
solutions to a problem. 


Gigabyte One billion bytes. More accurately, 2 to the 
30th power, or 1,073,741,824 in decimal notation. 


GIGO An acronym of “Garbage In, Garbage Out,” 
which emphasizes that information systems will produce 
erroneous and invalid output when provided with erroneous 
and invalid input data or instructions. 


Global Company A business that is driven by a 
global strategy so that all its activities are planned and 
implemented in the context of a whole-world system. 


Global e-Business Technology Management Managing 
information technologies in a global e-business enterprise, 
amid the cultural, political, and geoeconomic challenges 
involved in developing e-business/IT strategies, global 
e-business and e-commerce applications portfolios, 
Internet-based technology platforms, and global data 
resource management policies. 


Global Information Technology The use of computer- 
based information systems and telecommunications 
networks using a variety of information technologies to 
support global business operations and management. 


Globalization Becoming a global enterprise by 
expanding into global markets, using global production 
facilities, forming alliances with global partners, and so on. 


Goal-Seeking Analysis Making repeated changes to 
selected variables until a chosen variable reaches a target 
value. 


Graphical User Interface A software interface that relies 
on icons, bars, buttons, boxes, and other images to initiate 
computer-based tasks for users. 


Graphics Pertaining to symbolic input or output from 
a computer system, such as lines, curves, and geometric 
shapes, using video display units or graphics plotters and 
printers. 


Graphics Pen and Tablet A device that allows an end 
user to draw or write on a pressure-sensitive tablet and have 


the handwriting or graphics digitized by the computer and 
accepted as input. 


Graphics Software A program that helps users generate 
graphics displays. 

Group Decision Making Decisions made by groups of 
people coming to an agreement on a particular issue. 


Group Decision Support System (GDSS) A decision 
support system that provides support for decision making 
by groups of people. 

Group Support Systems (GSS) An information system 
that enhances communication, coordination, collaboration, 
decision making, and group work activities of teams and 
workgroups. 


Groupware Software to support and enhance the 
communication, coordination, and collaboration among 
networked teams and workgroups, including software tools 
for electronic communications, electronic conferencing, 
and cooperative work management. 


Hacking (1) Obsessive use of a computer. (2) The 
unauthorized access and use of computer systems. 


Handshaking Exchange of predetermined signals when 
a connection is established between two communications 
terminals. 


Hard Copy A data medium or data record that has a 
degree of permanence and that can be read by people or 
machines. 


Hardware (1) Machines and media. (2) Physical 
equipment, as opposed to computer programs or methods 
of use. (3) Mechanical, magnetic, electrical, electronic, or 
optical devices. Contrast with Software. 


Hash Total ‘The sum of numbers in a data field that 
are not normally added, such as account numbers or 
other identification numbers. It is utilized as a control 
total, especially during input/output operations of batch 
processing systems. 


Header Label A machine-readable record at the beginning 
of a file containing data for file identification and control. 


Heuristic Pertaining to exploratory methods of problem 
solving in which solutions are discovered by evaluation 

of the progress made toward the final result. It is an 
exploratory trial-and-error approach guided by rules of 
thumb. Opposite of algorithmic. 


Hierarchical Data Structure A logical data structure in 
which the relationships between records form a hierarchy 
or tree structure. The relationships among records are one 
to many, because each data element is related only to one 
element above it. 

High-Level Language A programming language that 
utilizes macro instructions and statements that closely 
resemble human language or mathematical notation to 
describe the problem to be solved or the procedure to be 
used. Also called a compiler language. 


Homeostasis A relatively stable state of equilibrium of a 
system. 


Host Computer Typically a larger central computer that 
performs the major data processing tasks in a computer 
network. 


Human Factors Hardware and software capabilities 
that can affect the comfort, safety, ease of use, and user 
customization of computer-based information systems. 


Human Information Processing A conceptual 
framework about the human cognitive process that uses 
an information processing context to explain how humans 
capture, process, and use information. 


Human Resource Information Systems (HRIS) 
Information systems that support human resource 
management activities such as recruitment, selection 
and hiring, job placement and performance appraisals, 
and training and development. 


Hybrid AI Systems Systems that integrate several AI 
technologies, such as expert systems and neural networks. 


Hypermedia Documents containing multiple forms of 
media, including text, graphics, video, and sound, that can 
be interactively searched, like Hypertext. 


Hypertext ‘Text in electronic form that has been indexed 
and linked (hyperlinks) by software in a variety of ways so 
that it can be randomly and interactively searched by a user. 
Hypertext Markup Language (HTML) A popular page 
description language for creating hypertext and hypermedia 
documents for World Wide Web and intranet Web sites. 


Icon A small figure on a video display that looks like 
a familiar office or other device such as a file folder (for 
storing a file) or a wastebasket (for deleting a file). 


Image Processing A computer-based technology that 
allows end users to electronically capture, store, process, 
and retrieve images that may include numeric data, text, 
handwriting, graphics, documents, and photographs. Image 
processing makes heavy use of optical scanning and optical 
disk technologies. 


Impact Printers Printers that form images on paper 
through the pressing of a printing element and an inked 
ribbon or roller against the face of a sheet of paper. 


Index An ordered reference list of the contents of a file 
or document together with keys or reference notations for 
identification or location of those contents. 


Index Sequential A method of data organization in which 

records are organized in sequential order and also referenced 
by an index. When utilized with direct access file devices, it is 
known as index sequential access method, or ISAM. 


Inference Engine The software component of an expert 
system, which processes the rules and facts related to a 
specific problem and makes associations and inferences 
resulting in recommended courses of action. 


Infomediaries Third-party market-maker companies that 
serve as intermediaries to bring buyers and sellers together 
by developing and hosting electronic catalog, exchange, and 
auction markets to accomplish e-commerce transactions. 


Information Data placed in a meaningful and useful 
context for an end user. 


Information Appliances Small Web-enabled 
microcomputer devices with specialized functions, such as 
handheld PDAs, TV set-top boxes, game consoles, cellular 
and PCS phones, wired telephone appliances, and other 
Web-enabled home appliances. 


Information Architecture A conceptual framework that 
defines the basic structure, content, and relationships of the 
organizational databases that provide the data needed to 
support the basic business processes of an organization. 


Information Center A support facility for the end users 
of an organization. It allows users to learn to develop 
their own application programs and accomplish their own 
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information processing tasks. End users are provided with 
hardware support, software support, and people support 
(trained user consultants). 


Information Float The time that a document is in transit 
between the sender and receiver and thus unavailable for 
any action or response. 


Information Processing A concept that covers both the 
traditional concept of processing numeric and alphabetic 
data and the processing of text, images, and voices. It 
emphasizes that the production of information products for 
users should be the focus of processing activities. 


Information Quality The degree to which information 
has content, form, and time characteristics that give it value 
for specific end users. 


Information Resource Management (IRM) A 
management concept that views data, information, and 
computer resources (computer hardware, software, 
networks, and personnel) as valuable organizational 
resources that should be efficiently, economically, 

and effectively managed for the benefit of the entire 
organization. 


Information Retrieval The methods and procedures for 
recovering specific information from stored data. 


Information Superhighway An advanced high-speed 
Internet-like network that connects individuals, households, 
businesses, government agencies, libraries, schools, 
universities, and other institutions with interactive voice, 
video, data, and multimedia communications. 


Information System (1) A set of people, procedures, 

and resources that collects, transforms, and disseminates 
information in an organization. (2) A system that accepts 
data resources as input and processes them into information 
products as output. 


Information System Model A conceptual framework 
that views an information system as a system that uses the 
resources of hardware (machines and media), software 
(programs and procedures), people (users and specialists), 
and networks (communications media and network support) 
to perform input, processing, output, storage, and control 
activities that transform data resources (databases and 
knowledge bases) into information products. 


Information Systems Development See Systems 
Development. 


Information System Specialist A person whose 
occupation is related to the providing of information system 
services. For example, a systems analyst, programmer, or 
computer operator. 


Information Technology (IT) Hardware, software, 

telecommunications, database management, and other 

information processing technologies used in computer- 
based information systems. 


Information Technology Architecture A conceptual 
blueprint that specifies the components and interrelationships 
of a company’s technology infrastructure, data resources, 
applications architecture, and IT organization. 


Information Technology Management Managing 
information technologies by (1) the joint development 
and implementation of business and IT strategies by 
business and IT executives, (2) managing the research and 
implementation of new information technologies and the 
development of business applications, and (3) managing 
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the IT processes, professionals, subunits, and infrastructure 
within a company. 

Information Theory The branch of learning 

concerned with the likelihood of accurate transmission or 
communication of messages subject to transmission failure, 
distortion, and noise. 


Input Pertaining to a device, process, or channel involved 
in the insertion of data into a data processing system. 
Opposite of Output. 


Input/Output (I/O) Pertaining to either input or output, 
or both. 


Input/Output Interface Hardware Devices such as I/O 
ports, I/O buses, buffers, channels, and I/O control units, 
which assist the CPU in its input/output assignments. 
These devices make it possible for modern computer 
systems to perform input, output, and processing functions 
simultaneously. 


Inquiry Processing Computer processing that supports 
the real-time interrogation of online files and databases by 
end users. 


Instruction A grouping of characters that specifies the 
computer operation to be performed. 


Intangible Benefits and Costs The nonquantifiable 
benefits and costs of a proposed solution or system. 


Integrated Circuit A complex microelectronic circuit 
consisting of interconnected circuit elements that cannot 
be disassembled because they are placed on or within a 
“continuous substrate” such as a silicon chip. 


Integrated Packages Software that combines the ability 
to do several general-purpose applications (such as word 
processing, electronic spreadsheet, and graphics) into one 
program. 


Intelligent Agent A special-purpose knowledge-based 
system that serves as a software surrogate to accomplish 
specific tasks for end users. 


Intelligent Terminal A terminal with the capabilities of a 
microcomputer that can thus perform many data processing 
and other functions without accessing a larger computer. 


Interactive Marketing A dynamic collaborative process 
of creating, purchasing, and improving products and 
services that builds close relationships between a business 
and its customers, using a variety of services on the 
Internet, intranets, and extranets. 


Interactive Processing A type of real-time processing 
in which users can interact with a computer on a real-time 
basis. 


Interactive Video Computer-based systems that 
integrate image processing with text, audio, and video 
processing technologies, which makes interactive 
multimedia presentations possible. 


Interface A shared boundary, such as the boundary 
between two systems. For example, the boundary between a 
computer and its peripheral devices. 


Internet A rapidly growing computer network of millions 
of business, educational, and governmental networks 
connecting hundreds of millions of computers and their 
users in over 200 countries. 


Internetwork Processor Communications processors 
used by local area networks to interconnect them with 
other local area and wide area networks. Examples include 
switches, routers, hubs, and gateways. 


Internetworks Interconnected local area and wide area 
networks. 


Interoperability Being able to accomplish end-user 
applications using different types of computer systems, 
operating systems, and application software, interconnected 
by different types of local and wide area networks. 


Interorganizational Information Systems Information 
systems that interconnect an organization with other 
organizations, such as a business and its customers and 
suppliers. 


Interpreter A computer program that translates and 
executes each source language statement before translating 
and executing the next one. 


Interrupt A condition that causes an interruption 

in a processing operation during which another task is 
performed. At the conclusion of this new assignment, 
control may be transferred back to the point at which the 
original processing operation was interrupted or to other 
tasks with a higher priority. 


Intranet An Internet-like network within an organization. 
Web browser software provides easy access to internal Web 
sites established by business units, teams, and individuals, 
and other network resources and applications. 


Inverted File A file that references entities by their 
attributes. 


IT Architecture A conceptual design for the 
implementation of information technology in an 
organization, including its hardware, software, and network 
technology platforms, data resources, application portfolio, 
and IS organization. 


Iterative Pertaining to the repeated execution of a series 
of steps. 


Java An object-oriented programming language designed 
for programming real-time, interactive, Web-based 
applications in the form of applets for use on clients and 
servers on the Internet, intranets, and extranets. 


Job A specified group of tasks prescribed as a unit of work 
for a computer. 


Job Control Language (JCL) A language for 
communicating with the operating system of a computer to 
identify a job and describe its requirements. 


Joystick A small lever set in a box used to move the 
cursor on the computer’s display screen. 


K An abbreviation for the prefix kilo, which is 1,000 in 
decimal notation. When referring to storage capacity, it 
is equivalent to 2 to the 10th power, or 1,024 in decimal 
notation. 


Key One or more fields within a data record that are used 
to identify it or control its use. 


Keyboarding Using the keyboard of a microcomputer or 
computer terminal. 


Knowledge Base A computer-accessible collection of 
knowledge about a subject in a variety of forms, such as 
facts and rules of inference, frames, and objects. 


Knowledge-Based Information System An information 
system that adds a knowledge base to the database and 
other components found in other types of computer-based 
information systems. 


Knowledge Engineer A specialist who works with 
experts to capture the knowledge they possess to develop a 


knowledge base for expert systems and other knowledge- 
based systems. 


Knowledge Management Organizing and sharing the 
diverse forms of business information created within an 
organization. Includes managing project and enterprise 
document libraries, discussion databases, intranet Web site 
databases, and other types of knowledge bases. 


Knowledge Workers People whose primary work 
activities include creating, using, and distributing 
information. 


Language Translator Program A program that converts 
the programming language instructions in a computer 
program into machine language code. Major types include 
assemblers, compilers, and interpreters. 


Large-Scale Integration (LSI) A method of 
constructing electronic circuits in which thousands of 
circuits can be placed on a single semiconductor chip. 


Legacy Systems The older, traditional, mainframe-based 
business information systems of an organization. 


Light Pen A photoelectronic device that allows data to be 
entered or altered on the face of a video display terminal. 


Liquid Crystal Displays (LCDs) Electronic visual 
displays that form characters by applying an electrical 
charge to selected silicon crystals. 


List Organization A method of data organization 
that uses indexes and pointers to allow for nonsequential 
retrieval. 


List Processing A method of processing data in the form 
of lists. 


Local Area Network (LAN) A communications network 
that typically connects computers, terminals, and other 
computerized devices within a limited physical area such as 
an office, building, manufacturing plant, or other worksite. 


Locking In Customers and Suppliers Building valuable 
relationships with customers and suppliers that deter them 

from abandoning a firm for its competitors or intimidating 

it into accepting less profitable relationships. 


Logical Data Elements Data elements that are 
independent of the physical data media on which they are 
recorded. 


Logical System Design Developing general 
specifications for how basic information systems activities 
can meet end-user requirements. 


Loop A sequence of instructions in a computer program 
that is executed repeatedly until a terminal condition 
prevails. 


Machine Cycle The timing of a basic CPU operation as 
determined by a fixed number of electrical pulses emitted 
by the CPU’s timing circuitry or internal clock. 

Machine Language A programming language in 

which instructions are expressed in the binary code of the 
computer. 


Macro Instruction An instruction in a source language 
that is equivalent to a specified sequence of machine 
instructions. 


Magnetic Disk A flat, circular plate with a magnetic 
surface on which data can be stored by selective 
magnetization of portions of the curved surface. 


Magnetic Ink An ink that contains particles of iron oxide 
that can be magnetized and detected by magnetic sensors. 
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Magnetic Ink Character Recognition (MICR) The 
machine recognition of characters printed with magnetic 
ink. Primarily used for check processing by the banking 
industry. 


Magnetic Tape A plastic tape with a magnetic surface 
on which data can be stored by selective magnetization of 
portions of the surface. 


Mag Stripe Card A plastic, wallet-size card with a strip of 
magnetic tape on one surface; widely used for credit/debit 
cards. 


Mainframe A larger computer system, typically with 
a separate central processing unit, as distinguished from 
microcomputer and minicomputer systems. 


Management Information System (MIS) A 
management support system that produces prespecified 
reports, displays, and responses on a periodic, exception, 
demand, or push reporting basis. 


Management Support System (MSS) An information 
system that provides information to support managerial 
decision making. More specifically, an information- 
reporting system, executive information system, or decision 
support system. 


Managerial End User A manager, entrepreneur, 

or managerial-level professional who personally uses 
information systems. Also, the manager of the department 
or other organizational unit that relies on information 
systems. 


Managerial Roles Management of the performance of a 
variety of interpersonal, information, and decision roles. 


Manual Data Processing Data processing that requires 
continual human operation and intervention and that 
utilizes simple data processing tools such as paper forms, 
pencils, and filing cabinets. 


Manufacturing Information Systems Information 
systems that support the planning, control, and 
accomplishment of manufacturing processes. This includes 
concepts such as computer-integrated manufacturing (CIM) 
and technologies such as computer-aided manufacturing 
(CAM) or computeraided design (CAD). 


Marketing Information Systems Information systems 
that support the planning, control, and transaction 
processing required for the accomplishment of marketing 
activities, such as sales management, advertising, and 
promotion. 


Mass Storage Secondary storage devices with extra-large 
storage capacities, such as magnetic or optical disks. 


Master File A data file containing relatively permanent 
information that is utilized as an authoritative reference and is 
usually updated periodically. Contrast with Transaction File. 


Mathematical Model A mathematical representation of a 
process, device, or concept. 


Media All tangible objects on which data are recorded. 


Megabyte One million bytes. More accurately, 2 to the 
20th power, or 1,048,576 in decimal notation. 

Memory See Storage. 

Menu A displayed list of items (usually the names of 
alternative applications, files, or activities) from which an 
end user makes a selection. 


Menu Driven A characteristic of interactive computing 
systems that provides menu displays and operator 
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prompting to assist an end user in performing a particular 
job. 


Metadata Data about data; data describing the structure, 
data elements, interrelationships, and other characteristics 
of a database. 


Microcomputer A very small computer, ranging in size 
from a “computer on a chip” to handheld, laptop, and 
desktop units, and servers. 


Micrographics ‘The use of microfilm, microfiche, and 
other microforms to record data in greatly reduced form. 


Microprocessor A microcomputer central processing 
unit (CPU) on a chip. Without input/output or primary 
storage capabilities in most types. 


Microprogram A small set of elementary control 
instructions called microinstructions or microcode. 


Microprogramming The use of special software 
(microprograms) to perform the functions of special 
hardware (electronic control circuitry). Microprograms 
stored in a read-only storage module of the control 
unit interpret the machine language instructions of a 
computer program and decode them into elementary 
microinstructions, which are then executed. 


Microsecond A millionth of a second. 


Middleware Software that helps diverse software 
programs and networked computer systems work together, 
thus promoting their interoperability. 


Midrange Computer A computer category between 
microcomputers and mainframes. Examples include 
minicomputers, network servers, and technical 
workstations. 


Millisecond A thousandth of a second. 
Minicomputer A type of midrange computer. 


Model Base An organized software collection of 
conceptual, mathematical, and logical models that express 
business relationships, computational routines, or analytical 
techniques. 


Modem (MOdulator-DEModulator) A device that 
converts the digital signals from input/output devices 
into appropriate frequencies at a transmission terminal 
and converts them back into digital signals at a receiving 
terminal. 


Monitor Software or hardware that observes, supervises, 
controls, or verifies the operations of a system. 


Mouse A small device that is electronically connected to 
a computer and is moved by hand on a flat surface to move 
the cursor on a video screen in the same direction. Buttons 
on the mouse allow users to issue commands and make 
responses or selections. 


Multidimensional Structure A database model that uses 
multidimensional structures (such as cubes or cubes within 
cubes) to store data and relationships between data. 


Multimedia Presentations Providing information 
using a variety of media, including text and graphics 
displays, voice and other audio, photographs, and video 
segments. 

Multiplex ‘To interleave or simultaneously transmit two 
or more messages on a single channel. 


Multiplexer An electronic device that allows a single 
communications channel to carry simultaneous data 
transmissions from many terminals. 


Multiprocessing Pertaining to the simultaneous 
execution of two or more instructions by a computer or 
computer network. 


Multiprocessor Computer Systems Computer 
systems that use a multiprocessor architecture in the 
design of their central processing units. This includes 
the use of support microprocessors and multiple 
instruction processors, including parallel processor 
designs. 


Multiprogramming Pertaining to the concurrent 
execution of two or more programs by a computer by 
interleaving their execution. 


Multitasking The concurrent use of the same computer 
to accomplish several different information processing 
tasks. Each task may require the use of a different program 
or the concurrent use of the same copy of a program by 
several users. 


Nanosecond One billionth of a second. 


Natural Language A programming language that is 
very close to human language. Also called very high-level 
language. 

Network An interconnected system of computers, 
terminals, and communications channels and devices. 


Network Architecture A master plan designed 

to promote an open, simple, flexible, and efficient 
telecommunications environment through the use of 
standard protocols, standard communications hardware and 
software interfaces, and the design of a standard multilevel 
telecommunications interface between end users and 
computer systems. 


Network Computer A low-cost networked 
microcomputer with no or minimal disk storage, which 
depends on Internet or intranet servers for its operating 
system and Web browser, Java-enabled application 
software, and data access and storage. 


Network Computing A network-centric view of 
computing in which “the network is the computer,” that is, 
the view that computer networks are the central computing 
resource of any computing environment. 


Network Data Structure A logical data structure that 
allows many-to-many relationships among data records. It 
allows entry into a database at multiple points, because any 
data element or record can be related to many other data 
elements. 


Neural Networks Computer processors or software 
whose architecture is based on the human brain’s meshlike 
neuron structure. Neural networks can process many pieces 
of information simultaneously and learn to recognize 
patterns and programs to solve related problems on their 
own. 


Node A terminal point in a communications network. 


Nonprocedural Languages Programming languages 
that allow users and professional programmers to specify 
the results they want without specifying how to solve the 
problem. 


Numerical Control Automatic control of a machine 
process by a computer that makes use of numerical data, 
generally introduced as the operation is in process. Also 
called machine control. 


Object A data element that includes both data and the 
methods or processes that act on those data. 


Object-Based Knowledge Knowledge represented as a 
network of objects. 


Object-Oriented Language An object-oriented 
programming (OOP) language used to develop programs 
that create and use objects to perform information 
processing tasks. 


Object Program A compiled or assembled program 
composed of executable machine instructions. Contrast 
with Source Program. 


OEM: Original Equipment Manufacturer A firm 
that manufactures and sells computers by assembling 
components produced by other hardware manufacturers. 


Office Automation (OA) ‘The use of computer-based 
information systems that collect, process, store, and 
transmit electronic messages, documents, and other forms 
of office communications among individuals, workgroups, 
and organizations. 


Offline Pertaining to equipment or devices not under 
control of the central processing unit. 


Offshoring A relocation of an organization’s business 
processes to a lower cost location overseas. 


Online Pertaining to equipment or devices under control 
of the central processing unit. 


Online Analytical Processing (OLAP) A capability 

of some management, decision support, and executive 
information systems that supports interactive examination 
and manipulation of large amounts of data from many 
perspectives. 


Online Transaction Processing (OLTP) A real-time 
transaction processing system. 


Open Systems Information systems that use common 
standards for hardware, software, applications, and 
networking to create a computing environment that allows 
easy access by end users and their networked computer 
systems. 


Operand That which is operated upon. That part of a 
computer instruction that is identified by the address part 
of the instruction. 


Operating Environment Software packages or 
modules that add a graphics-based interface among 
end users, the operating system, and their application 
programs and that may also provide multitasking 
capability. 

Operating System ‘The main control program of a 
computer system. It is a system of programs that controls 
the execution of computer programs and may provide 
scheduling, debugging, input/output control, system 
accounting, compilation, storage assignment, data 
management, and related services. 


Operational Feasibility The willingness and ability 
of management, employees, customers, and suppliers to 
operate, use, and support a proposed system. 


Operation Code A code that represents specific 
operations to be performed upon the operands in a 
computer instruction. 


Operations Support System (OSS) An information 
system that collects, processes, and stores data 
generated by the operations systems of an organization 
and produces data and information for input into a 
management information system or for the control of an 
operations system. 
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Operations System A basic subsystem of the business 
firm that constitutes its input, processing, and output 
components. Also called a physical system. 


Optical Character Recognition (OCR) The machine 
identification of printed characters through the use of light- 
sensitive devices. 


Optical Disks A secondary storage medium using 

CD (compact disk) and DVD (digital versatile disk) 
technologies to read tiny spots on plastic disks. The disks 
are currently capable of storing billions of characters of 
information. 


Optical Scanner A device that optically scans characters 
or images and generates their digital representations. 


Optimization Analysis Finding an optimum value for 
selected variables in a mathematical model, given certain 
constraints. 


Organizational Feasibility How well a proposed 
information system supports the objectives of an 
organization’s strategic plan for information systems. 


Output Pertaining to a device, process, or channel 
involved with the transfer of data or information out of an 
information processing system. Opposite of Input. 


Outsourcing ‘Turning over all or part of an organization’s 
information systems operation to outside contractors, 
known as systems integrators or service providers. 


Packet A group of data and control information in a 
specified format that is transmitted as an entity. 


Packet Switching A data transmission process that 
transmits addressed packets such that a channel is occupied 
only for the duration of transmission of the packet. 


Page A segment of a program or data, usually of fixed 
length. 


Paging A process that automatically and continually 
transfers pages of programs and data between primary 
storage and direct access storage devices. It provides 
computers with multiprogramming and virtual memory 
capabilities. 

Parallel Processing Executing many instructions at 

the same time, that is, in parallel. Performed by advanced 
computers using many instruction processors organized in 
clusters or networks. 


Parity Bit A check bit appended to an array of binary 
digits to make the sum of all the binary digits, including the 
check bit, always odd or always even. 


Pascal A high-level, general-purpose, structured 
programming language named after Blaise Pascal. It was 
developed by Niklaus Wirth of Zurich in 1968. 


Pattern Recognition ‘The identification of shapes, forms, 
or configurations by automatic means. 


PCM: Plug-Compatible Manufacturer A firm that 
manufactures computer equipment that can be plugged 
into existing computer systems without requiring additional 
hardware or software interfaces. 


Peer-to-Peer Network (P2P) A computing 
environment in which end-user computers connect, 
communicate, and collaborate directly with one another via 
the Internet or other telecommunications network links. 


Pen-Based Computers ‘Tablet-style microcomputers that 
recognize handwriting and hand drawing done by a pen- 
shaped device on their pressure-sensitive display screens. 
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Performance Monitor A software package that monitors 
the processing of computer system jobs, helps develop a 
planned schedule of computer operations that can optimize 
computer system performance, and produces detailed 
statistics that are used for computer system capacity 
planning and control. 


Periodic Reports Providing information to managers 
using a prespecified format designed to provide information 
on a regularly scheduled basis. 


Peripheral Devices In a computer system, any unit 
of equipment, distinct from the central processing unit, 
that provides the system with input, output, or storage 
capabilities. 

Personal Digital Assistant (PDA) Handheld 
microcomputer devices that enable you to manage 
information such as appointments, to-do lists, and sales 
contacts, send and receive e-mail, access the Web, and 
exchange such information with your desktop PC or 
network server. 


Personal Information Manager (PIM) A software 
package that helps end users store, organize, and retrieve 
text and numerical data in the form of notes, lists, memos, 
and a variety of other forms. 


Physical System Design Design of the user interface 

methods and products, database structures, and processing 
and control procedures for a proposed information system, 
including hardware, software, and personnel specifications. 


Picosecond One trillionth of a second. 


Plasma Display Output devices that generate a visual 
display with electrically charged particles of gas trapped 
between glass plates. 


Plotter A hard-copy output device that produces 
drawings and graphical displays on paper or other materials. 


Pointer A data element associated with an index, a 
record, or other set of data that contains the address of a 
related record. 


Pointing Devices Devices that allow end users to issue 
commands or make choices by moving a cursor on the 
display screen. 


Pointing Stick A small buttonlike device on a keyboard 
that moves the cursor on the screen in the direction of the 
pressure placed upon it. 


Point-of-Sale (POS) Terminal A computer terminal 
used in retail stores that serves the function of a cash 
register as well as collecting sales data and performing other 
data processing functions. 


Port (1) Electronic circuitry that provides a connection 
point between the CPU and input/output devices. (2) A 
connection point for a communications line on a CPU or 
other front-end device. 


Postimplementation Review Monitoring and evaluating 
the results of an implemented solution or system. 


Presentation Graphics Using computer-generated 
graphics to enhance the information presented in reports 
and other types of presentations. 


Prespecified Reports Reports whose format is 
specified in advance to provide managers with information 
periodically, on an exception basis, or on demand. 


Private Branch Exchange (PBX) A switching device 


that serves as an interface between the many telephone lines 
within a work area and the local telephone company’s main 


telephone lines or trunks. Computerized PBXs can handle 
the switching of both voices and data. 


Procedure-Oriented Language A programming 
language designed for the convenient expression of 
procedures used in the solution of a wide class of problems. 


Procedures Sets of instructions used by people to 
complete a task. 


Process Control The use of a computer to control 
an ongoing physical process, such as petrochemical 
production. 


Process Design ‘The design of the programs and 
procedures needed by a proposed information system, 
including detailed program specifications and procedures. 


Processor A hardware device or software system capable 
of performing operations on data. 


Program A set of instructions that causes a computer to 
perform a particular task. 


Programmed Decision A decision that can be automated 
by basing it on a decision rule that outlines the steps to take 
when confronted with the need for a specific decision. 


Programmer A person mainly involved in designing, 
writing, and testing computer programs. 


Programming The designing, writing, and testing of a 
program. 

Programming Language A language used to develop the 
instructions in computer programs. 


Programming Tools Software packages or modules 
that provide editing and diagnostic capabilities and other 
support facilities to assist the programming process. 


Project Management Managing the accomplishment of 
an information system development project according to a 
specific project plan, in order that a project is completed on 
time and within its budget and meets its design objectives. 


Prompt Messages that assist a user in performing 

a particular job. This would include error messages, 
correction suggestions, questions, and other messages that 
guide an end user. 


Protocol A set of rules and procedures for the control of 
communications in a communications network. 


Prototype A working model. In particular, a working 
model of an information system that includes tentative 
versions of user input and output, databases and files, 
control methods, and processing routines. 


Prototyping ‘The rapid development and testing of 
working models, or prototypes, of new information system 
applications in an interactive, iterative process involving 
both systems analysts and end users. 


Pseudocode An informal design language of structured 
programming that expresses the processing logic of a 
program module in ordinary human language phrases. 


Pull Marketing Marketing methods that rely on the 
use of Web browsers by end users to access marketing 


materials and resources at Internet, intranet, and extranet 
Web sites. 


Push Marketing Marketing methods that rely on Web 
broadcasting software to push marketing information and 
other marketing materials to end users’ computers. 


Quality Assurance Methods for ensuring that 
information systems are free from errors and fraud and 
provide information products of high quality. 


Query Language A high-level, humanlike language 
provided by a database management system that enables 
users to easily extract data and information from a 
database. 


Queue (1) A waiting line formed by items in a system 
waiting for service. (2) To arrange in or form a queue. 


RAID Redundant array of independent disks. Magnetic 
disk units that house many interconnected microcomputer 
hard disk drives, thus providing large, fault-tolerant storage 
capacities. 


Random Access Same as Direct Access. Contrast with 
Sequential Access. 


Random-Access Memory (RAM) One of the basic 
types of semiconductor memory used for temporary storage 
of data or programs during processing. Each memory 
position can be directly sensed (read) or changed (written) 
in the same length of time, regardless of its location on the 
storage medium. 


Reach and Range Analysis A planning framework that 
contrasts a firm’s ability to use its IT platform to reach its 
stakeholders with the range of information products and 
services that can be provided or shared through IT. 


Read-Only Memory (ROM) A basic type of 
semiconductor memory used for permanent storage. Can 
only be read, not “written,” that is, changed. Variations are 
Programmable Read-Only Memory (PROM) and Erasable 
Programmable Read-Only Memory (EPROM). 


Real Time Pertaining to the performance of data 
processing during the actual time a business or physical 
process transpires, in order that results of the data 
processing can be used to support the completion of the 
process. 


Real-Time Processing Data processing in which data 
are processed immediately rather than periodically. Also 
called online processing. Contrast with Batch Processing. 


Record A collection of related data fields treated as a 
unit. 


Reduced Instruction Set Computer (RISC) A CPU 
architecture that optimizes processing speed by the use 
of a smaller number of basic machine instructions than 
traditional CPU designs. 


Redundancy In information processing, the repetition 
of part or all of a message to increase the chance that the 
correct information will be understood by the recipient. 


Register A device capable of storing a specified amount 
of data, such as one word. 


Relational Data Structure A logical data structure in 
which all data elements within the database are viewed as 
being stored in the form of simple tables. DBMS packages 
based on the relational model can link data elements from 
various tables as long as the tables share common data 
elements. 


Remote Access Pertaining to communication with the 
data processing facility by one or more stations that are 
distant from that facility. 


Remote Job Entry (RJE) Entering jobs into a batch 
processing system from a remote facility. 


Report Generator A feature of database management 
system packages that allows an end user to quickly specify a 
report format for the display of information retrieved from 
a database. 


Glossary for Business Professionals @ 571 


Reprographics Copying and duplicating technology and 
methods. 


Resource Management An operating system function 
that controls the use of computer system resources such as 
primary storage, secondary storage, CPU processing time, 
and input/output devices by other system software and 
application software packages. 


Robotics The technology of building machines (robots) 
with computer intelligence and humanlike physical 
capabilities. 

Routine An ordered set of instructions that may have 
some general or frequent use. 


RPG: Report Program Generator A problem-oriented 
language that utilizes a generator to construct programs that 
produce reports and perform other data processing tasks. 


Rule Statements that typically take the form of a premise 
and a conclusion, such as ifthen rules: If (condition), Then 
(conclusion). 


Rule-Based Knowledge Knowledge represented in the 
form of rules and statements of fact. 


Scalability The ability of hardware or software to handle 
the processing demands of a wide range of end users, 
transactions, queries, and other information processing 
requirements. 


Scenario Approach A planning approach in which 
managers, employees, and planners create scenarios of 
what an organization will be like three to five years or more 
into the future and identify the role IT can play in those 
scenarios. 


Schema An overall conceptual or logical view of the 
relationships between the data in a database. 


Scientific Method An analytical methodology that 
involves (1) recognizing phenomena, (2) formulating a 
hypothesis about the causes or effects of the phenomena, 
(3) testing the hypothesis through experimentation, (4) 
evaluating the results of such experiments, and (5) drawing 
conclusions about the hypothesis. 


Secondary Storage Storage that supplements the 
primary storage of a computer. Synonymous with auxiliary 
storage. 


Sector A subdivision of a track on a magnetic disk 
surface. 


Security Codes Passwords, identification codes, account 
codes, and other codes that limit the access and use of 
computer-based system resources to authorized users. 


Security Management Protecting the accuracy, 
integrity, and safety of the processes and resources of an 
internetworked e-business enterprise against computer 
crime, accidental or malicious destruction, and natural 
disasters, using security measures such as encryption, 
firewalls, antivirus software, fault tolerant computers, and 
security monitors. 


Security Monitor A software package that monitors the 
use of a computer system and protects its resources from 
unauthorized use, fraud, and vandalism. 


Semiconductor Memory Microelectronic storage 
circuitry etched on tiny chips of silicon or other 
semiconducting material. The primary storage of 

most modern computers consists of microelectronic 
semiconductor storage chips for random-access memory 
(RAM) and read-only memory (ROM). 
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Semistructured Decisions Decisions involving 
procedures that can be partially prespecified but not 
enough to lead to a definite recommended decision. 


Sensitivity Analysis Observing how repeated changes 
to a single variable affect other variables in a mathematical 
model. 


Sequential Access A sequential method of storing and 
retrieving data from a file. Contrast with Random Access 
and Direct Access. 


Sequential Data Organization Organizing logical data 
elements according to a prescribed sequence. 


Serial Pertaining to the sequential or consecutive 
occurrence of two or more related activities in a single 
device or channel. 


Server (1) A computer that supports applications and 
telecommunications in a network, as well as the sharing 
of peripheral devices, software, and databases among the 
workstations in the network. (2) Versions of software for 
installation on network servers designed to control and 
support applications on client microcomputers in client/ 
server networks. Examples include multiuser network 
operating systems and specialized software for running 
Internet, intranet, and extranet Web applications, such as 
electronic commerce and enterprise collaboration. 


Service Bureau A firm offering computer and data 
processing services. Also called a computer service center. 


Smart Products Industrial and consumer products, with 
“intelligence” provided by built-in microcomputers or 
microprocessors that significantly improve the performance 
and capabilities of such products. 


Software Computer programs and procedures concerned 
with the operation of an information system. Contrast with 
Hardware. 


Software Package A computer program supplied by 
computer manufacturers, independent software companies, 
or other computer users. Also known as canned programs, 
proprietary software, or packaged programs. 


Software Piracy Unauthorized copying of software. 


Software Suites A combination of individual software 
packages that share a common graphical user interface 
and are designed for easy transfer of data between 
applications. 


Solid State Pertaining to devices such as transistors and 
diodes whose operation depends on the control of electric 
or magnetic phenomena in solid materials. 


Source Data Automation ‘The use of automated 
methods of data entry that attempt to reduce or eliminate 
many of the activities, people, and data media required by 
traditional data entry methods. 


Source Document A document that is the original 
formal record of a transaction, such as a purchase order or 
sales invoice. 


Source Program A computer program written in a 
language that is subject to a translation process. Contrast 
with Object Program. 


Special-Purpose Computer A computer designed 
to handle a restricted class of problems. Contrast with 
General-Purpose Computer. 


Speech Recognition Direct conversion of spoken data 
into electronic form suitable for entry into a computer 
system. Also called voice data entry. 


Spooling Simultaneous peripheral operation online. 
Storing input data from low-speed devices temporarily on 
high-speed secondary storage units, which can be quickly 
accessed by the CPU. Also, writing output data at high 
speeds onto magnetic tape or disk units from which it can 
be transferred to slow-speed devices such as a printer. 


Stage Analysis A planning process in which the 
information system’s needs of an organization are based 
on an analysis of its current stage in the growth cycle 
of the organization and its use of information systems 
technology. 


Standards Measures of performance developed to 
evaluate the progress of a system toward its objectives. 


Storage Pertaining to a device into which data can be 
entered, in which they can be held, and from which they 
can be retrieved at a later time. Same as Memory. 


Strategic Information Systems Information systems 
that provide a firm with competitive products and services 
that give it a strategic advantage over its competitors in 
the marketplace. Also, information systems that promote 
business innovation, improve business processes, and build 
strategic information resources for a firm. 


Strategic Opportunities Matrix A planning framework 
that uses a matrix to help identify opportunities with 
strategic business potential, as well as a firm’s ability to 
exploit such opportunities with IT. 


Structure Chart A design and documentation technique 
to show the purpose and relationships of the various 
modules in a program. 


Structured Decisions Decisions that are structured by 
the decision procedures or decision rules developed for 
them. They involve situations in which the procedures 

to follow when a decision is needed can be specified in 
advance. 


Structured Programming A programming methodology 
that uses a top-down program design and a limited number 
of control structures in a program to create highly 
structured modules of program code. 

Structured Query Language (SQL) A query language 
that is becoming a standard for advanced database 
management system packages. A query’s basic form is 
SELECT... FROM... WHERE. 


Subroutine A routine that can be part of another 
program routine. 


Subschema A subset or transformation of the logical view 
of the database schema that is required by a particular user 
application program. 


Subsystem A system that is a component of a larger 
system. 


Supercomputer A special category of large computer 
systems that are the most powerful available. They are 
designed to solve massive computational problems. 


Superconductor Materials that can conduct electricity 
with almost no resistance. This allows the development 

of extremely fast and small electronic circuits. Formerly 
only possible at supercold temperatures near absolute zero. 
Recent developments promise superconducting materials 
near room temperature. 


Supply Chain The network of business processes and 
interrelationships among businesses that are needed to 
build, sell, and deliver a product to its final customer. 


Supply Chain Management Integrating management 
practices and information technology to optimize 
information and product flows among the processes and 
business partners within a supply chain. 


Switch (1) A device or programming technique for 
making a selection. (2) A computer that controls message 
switching among the computers and terminals in a 
telecommunications network. 


Switching Costs The costs in time, money, effort, and 
inconvenience that it would take a customer or supplier to 
switch its business to a firm’s competitors. 


Synchronous A characteristic in which each event, or the 
performance of any basic operation, is constrained to start 
on, and usually to keep in step with, signals from a timing 
clock. Contrast with Asynchronous. 


System (1) A group of interrelated or interacting 
elements forming a unified whole. (2) A group of 
interrelated components working together toward a 
common goal by accepting inputs and producing outputs 
in an organized transformation process. (3) An assembly of 
methods, procedures, or techniques unified by regulated 
interaction to form an organized whole. (4) An organized 
collection of people, machines, and methods required to 
accomplish a set of specific functions. 


System Flowchart A graphic diagramming tool used to 
show the flow of information processing activities as data 
are processed by people and devices. 


Systems Analysis (1) Analyzing in detail the components 
and requirements of a system. (2) Analyzing in detail the 
information needs of an organization, the characteristics 
and components of presently utilized information systems, 
and the functional requirements of proposed information 
systems. 


Systems Approach A systematic process of problem 
solving that defines problems and opportunities in a 
systems context. Data are gathered describing the problem 
or opportunity, and alternative solutions are identified 

and evaluated. Then the best solution is selected and 
implemented, and its success is evaluated. 


Systems Design Deciding how a proposed information 
system will meet the information needs of end users. 
Includes logical and physical design activities and user 
interface, data, and process design activities that produce 
system specifications that satisfy the system requirements 
developed in the systems analysis stage. 


Systems Development (1) Conceiving, designing, 

and implementing a system. (2) Developing information 
systems by a process of investigation, analysis, design, 
implementation, and maintenance. Also called the systems 
development life cycle (SDLC), information systems 
development, or application development. 


Systems Development Tools Graphical, textual, and 
computer-aided tools and techniques used to help analyze, 
design, and document the development of an information 
system. Typically used to represent (1) the components 
and flows of a system, (2) the user interface, (3) data 
attributes and relationships, and (4) detailed system 
processes. 


Systems Implementation ‘The stage of systems 
development in which hardware and software are 
acquired, developed, and installed; the system is tested and 
documented; people are trained to operate and use the 
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system; and an organization converts to the use of a newly 
developed system. 


Systems Investigation ‘The screening, selection, and 
preliminary study of a proposed information system 
solution to a business problem. 


Systems Maintenance ‘The monitoring, evaluating, 
and modifying of a system to make desirable or necessary 
improvements. 


System Software Programs that control and support 
operations of a computer system. System software includes 
a variety of programs, such as operating systems, database 
management systems, communications control programs, 
service and utility programs, and programming language 
translators. 


System Specifications The product of the systems 
design stage. It consists of specifications for the hardware, 
software, facilities, personnel, databases, and the user 
interface of a proposed information system. 


Systems Thinking Recognizing systems, subsystems, 
components of systems, and system interrelationships in 
a situation. Also known as a systems context or a systemic 
view of a situation. 


System Support Programs Programs that support the 
operations, management, and users of a computer system 
by providing a variety of support services. Examples are 
system utilities and performance monitors. 


Tangible Benefits and Costs The quantifiable benefits 
and costs of a proposed solution or system. 


Task and Project Management Managing team and 
workgroup projects by scheduling, tracking, and charting 
the completion status of tasks within a project. 


‘Task Management A basic operating system function 
that manages the accomplishment of the computing tasks of 
users by a computer system. 


TCP/IP ‘Transmission control protocol/Internet protocol. 
A suite of telecommunications network protocols used by 
the Internet, intranets, and extranets that has become a de 
facto network architecture standard for many companies. 


Technical Feasibility Whether reliable hardware and 
software capable of meeting the needs of a proposed system 
can be acquired or developed by an organization in the 
required time. 


Technology Management The organizational 
responsibility to identify, introduce, and monitor the 
assimilation of new information system technologies into 
organizations. 


Telecommunications Pertaining to the transmission 
of signals over long distances, including not only data 
communications but also the transmission of images and 
voices using radio, television, and other communications 
technologies. 


Telecommunications Channel ‘The part of a 
telecommunications network that connects the message 
source with the message receiver. It includes the hardware, 
software, and media used to connect one network location 
to another for the purpose of transmitting and receiving 
information. 


‘Telecommunications Controller A data communications 
interface device (frequently a special-purpose mini- or 
microcomputer) that can control a telecommunications 
network containing many terminals. 
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‘Telecommunications Control Program A computer 
program that controls and supports the communications 
between the computers and terminals in a telecommunications 
network. 


Telecommunications Monitors Computer programs 
that control and support the communications between the 
computers and terminals in a telecommunications network. 


‘Telecommunications Processors Internetwork 
processors such as switches and routers and other devices 
such as multiplexers and communications controllers that 
allow a communications channel to carry simultaneous data 
transmissions from many terminals. They may also perform 
error monitoring, diagnostics and correction, modulation- 
demodulation, data compression, data coding and decoding, 
message switching, port contention, and buffer storage. 


Telecommuting The use of telecommunications to 
replace commuting to work from one’s home. 


Teleconferencing The use of video communications to 
allow business conferences to be held with participants who 
are scattered across a country, continent, or the world. 


Telephone Tag The process that occurs when two 
people who wish to contact each other by telephone 
repeatedly miss each other’s phone calls. 


Teleprocessing Using telecommunications for 
computer-based information processing. 


Terabyte One trillion bytes. More accurately, 2 to the 
40th power, or 1,009,511,627,776 in decimal notation. 


Text Data Words, phrases, sentences, and paragraphs 
used in documents and other forms of communication. 


Throughput The total amount of useful work 
performed by a data processing system during a given 
period. 


Time Sharing Providing computer services to many 
users simultaneously while providing rapid responses to 
each. 


Total Quality Management Planning and implementing 
programs of continuous quality improvement, where 
quality is defined as meeting or exceeding the requirements 
and expectations of customers for a product or service. 


‘Touch-Sensitive Screen An input device that accepts 
data input by the placement of a finger on or close to the 
CRT screen. 


Track ‘The portion of a moving storage medium, such as 
a drum, tape, or disk, that is accessible to a given reading 
head position. 


Trackball A rollerball device set in a case used to move 
the cursor on a computer’s display screen. 


Transaction An event that occurs as part of doing 
business, such as a sale, purchase, deposit, withdrawal, 
refund, transfer, or payment. 


Transaction Document A document produced as part 
of a business transaction: for example, a purchase order, 
paycheck, sales receipt, or customer invoice. 


Transaction File A data file containing relatively 
transient data to be processed in combination with a 
master file. Contrast with Master File. 


‘Transaction Processing Cycle A cycle of basic 
transaction processing activities including data entry, 
transaction processing, database maintenance, document 
and report generation, and inquiry processing. 


‘Transaction Processing System (TPS) An information 
system that processes data arising from the occurrence of 
business transactions. 


Transaction Terminals Terminals used in banks, retail 
stores, factories, and other worksites to capture transaction 
data at their point of origin. Examples are point-of-sale 
(POS) terminals and automated teller machines (ATMs). 


Transborder Data Flows (TDF) The flow of business 
data over telecommunications networks across international 
borders. 


Transform Algorithm Performing an arithmetic 
computation on a record key and using the result of the 
calculation as an address for that record. Also known as key 
transformation or hashing. 


Transnational Strategy A management approach 

in which an organization integrates its global business 
activities through close cooperation and interdependence 
among its headquarters, operations, and international 
subsidiaries and its use of appropriate global information 
technologies. 


‘Turnaround Document Output of a computer system 
(such as customer invoices and statements) that is designed 
to be returned to the organization as machine-readable 
input. 

Turnaround Time The elapsed time between submission 
of a job to a computing center and the return of the results. 


Turnkey Systems Computer systems in which all of the 
hardware, software, and systems development needed by a 
user are provided. 


Unbundling The separate pricing of hardware, software, 
and other related services. 


Uniform Resource Locator (URL) An access code 
(such as http://www.sun.com) for identifying and locating 
hypermedia document files, databases, and other resources 
at Web sites and other locations on the Internet, intranets, 
and extranets. 


Universal Product Code (UPC) A standard 
identification code using bar coding printed on products 
that can be read by optical scanners such as those found at a 
supermarket checkout. 


Unstructured Decisions Decisions that must be made 
in situations in which it is not possible to specify in advance 
most of the decision procedures to follow. 


User Friendly A characteristic of human-operated 
equipment and systems that makes them safe, comfortable, 
and easy to use. 


User Interface ‘That part of an operating system or other 
p perating syste 

program that allows users to communicate with it to load 

programs, access files, and accomplish other computing 

tasks. 


User Interface Design Designing the interactions 
between end users and computer systems, including 
input/output methods and the conversion of data between 
human-readable and machine-readable forms. 


Utility Program A standard set of routines that assists 

in the operation of a computer system by performing some 
frequently required process such as copying, sorting, or 
merging. 

Value-Added Carriers Third-party vendors who lease 
telecommunications lines from common carriers and offer a 
variety of telecommunications services to customers. 


Value-Added Resellers (VARs) Companies that provide 
industry-specific software for use with the computer 
systems of selected manufacturers. 


Value Chain Viewing a firm as a series, chain, or network 
of basic activities that adds value to its products and services 
and thus adds a margin of value to the firm. 


Videoconferencing Real-time video and audio 
conferencing (1) among users at networked PCs 

(desktop videoconferencing) or (2) among participants 

in conference rooms or auditoriums in different locations 
(teleconferencing). Videoconferencing can also include 
whiteboarding and document sharing. 


Virtual Communities Groups of people with similar 
interests who meet and share ideas on the Internet and online 
services and develop a feeling of belonging to a community. 


Virtual Company A form of organization that uses 
telecommunications networks and other information 
technologies to link the people, assets, and ideas of a variety 
of business partners, no matter where they may be, to 
exploit a business opportunity. 


Virtual Machine Pertaining to the simulation of one type 
of computer system by another computer system. 


Virtual Mall An online multimedia simulation of a 
shopping mall with many different interlinked retail Web 
sites. 


Virtual Memory The use of secondary storage devices 
as an extension of the primary storage of the computer, 
thus giving the appearance of a larger main memory than 
actually exists. 


Virtual Private Network A secure network that uses 
the Internet as its main backbone network to connect the 
intranets of a company’s different locations or to establish 
extranet links between a company and its customers, 
suppliers, or other business partners. 


Virtual Reality The use of multisensory human/ 
computer interfaces that enable human users to experience 
computer-simulated objects, entities, spaces, and “worlds” 
as if they actually existed. 


Virtual Storefront An online multimedia simulation of a 
retail store shopping experience on the Web. 


Virtual Team A team whose members use the Internet, 
intranets, extranets, and other networks to communicate, 
coordinate, and collaborate with one another on tasks 
and projects, even though they may work in different 
geographic locations and for different organizations. 


VLSI: Very-Large-Scale Integration Semiconductor 
chips containing hundreds of thousands of circuits. 


Voice Conferencing ‘Telephone conversations shared 
among several participants via speaker phones or networked 
PCs with Internet telephone software. 


Voice Mail Unanswered telephone messages that are 
digitized, stored, and played back to the recipient by a voice 
messaging computer. 


Volatile Memory Memory (such as electronic 
semiconductor memory) that loses its contents when 
electrical power is interrupted. 


Wand A handheld optical character recognition device 
used for data entry by many transaction terminals. 


Web Browser A software package that provides the 
user interface for accessing Internet, intranet, and extranet 
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Web sites. Browsers are becoming multifunction universal 
clients for sending and receiving e-mail, downloading files, 
accessing Java applets, participating in discussion groups, 
developing Web pages, and other Internet, intranet, and 
extranet applications. 


Web Publishing Creating, converting, and storing 

hyperlinked documents and other material on Internet or 
intranet Web servers so that they can be easily shared via 
Web browsers with teams, workgroups, or the enterprise. 


Web Services A collection of Web and object-oriented 
technologies for linking Web-based applications running 
on different hardware, software, database, or network 
platforms. For example, Web services could link key 
business functions within the applications a business 
shares with its customers, suppliers, and business 
partners. 


What-If Analysis Observing how changes to selected 
variables affect other variables in a mathematical model. 


Whiteboarding See Data Conferencing. 


Wide Area Network (WAN) A data communications 
network covering a large geographic area. 


Window One section of a computer’s multiple-section 
display screen, each section of which can have a different 
display. 

Wireless LANs Using radio or infrared transmissions to 
link devices in a local area network. 


Wireless Technologies Using radio wave, microwave, 
infrared, and laser technologies to transport digital 
communications without wires between communications 
devices. Examples include terrestrial microwave, 
communications satellites, cellular and PCS phone and 
pager systems, mobile data radio, and various wireless 
Internet technologies. 


Word (1) A string of characters considered as unit. (2) An 
ordered set of bits (usually larger than a byte) handled as a 
unit by the central processing unit. 


Word Processing ‘The automation of the transformation 
of ideas and information into a readable form of 
communication. It involves the use of computers to 
manipulate text data to produce office communications in 
the form of documents. 


Workgroup Computing Members of a networked 
workgroup may use groupware tools to communicate, 
coordinate, and collaborate and to share hardware, 
software, and databases to accomplish group 
assignments. 


Workstation (1) A computer system designed to support 
the work of one person. (2) A high-powered computer to 
support the work of professionals in engineering, science, 
and other areas that require extensive computing power and 
graphics capabilities. 

World Wide Web (WWW) A global network of 
multimedia Internet sites for information, education, 
entertainment, e-business, and e-commerce. 


XML (Extensible Markup Language) A Web 
document content description language that describes 

the content of Web pages by applying hidden identifying 
tags or contextual labels to the data in Web documents. 
By categorizing and classifying Web data this way, XML 
makes Web content easier to identify, search, analyze, and 
selectively exchange between computers. 
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97, 98 
Contract programming, 136 
Control 
access, 318 
computer system, 89 
defined, 29 
end-user development, 421 
information system, 30, 495 
manufacturing system, 297 
operations support system, 14 
process, 14, 511 
system performance, 36 
systems, 29 
Control logs, 496 
Control Objectives for Information and 
Related Technology (COBIT), 
519-520, 521 
Conversion, 437-439 
defined, 437 
direct, 437-438 
parallel, 438 
phased, 439 
pilot, 438-439 
Corrective maintenance, 439 
Cost leadership strategy, 48, 49 
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Cost/benefit analysis, 412 

COTS (commercial-off-the-shelf) 
software, 124 

CPM (critical path method), 431 

CPUs (central processing units), 115, 144 

Cracking, 462-463 

Critical path method (CPM), 431 

Critical success factors (CSFs), 372 

Cross selling, 371 

Cross-functional enterprise applications, 
260-264, 302 

Cross-selling, 266 

CRIs (cathode ray tubes), 479 

CTDs (cumulative trauma disorders), 479 

CTO (chief technology officer), 
512, 513 

Cumulative trauma disorders 
(CTDs), 479 

Customer behavior, 371 

Customer data integration (CDD), 271 


Customer relationship management (CRM), 


52-53, 167, 263, 265-271 
acquire, 269 
benefits and challenges, 269 
business initiatives, 265 
contact and account management, 266 
customer service and support, 267 
data and, 261-262 
database, 267 
defined, 266 
enhance, 269 
failures, 270 
information systems, 265 
marketing and fulfillment, 267 
phases, 268-269 
retain, 269 
retention and loyalty programs, 267 
sales, 266-267 
software, 266 
summary, 303 
Customer-focused businesses, 52-53, 66 
Cyber law, 476-477 
Cyber theft, 463 
Cybernetic systems, 29 
Cybersquatting, 313 
Cyberterrorism, 463-464 


DASDs (direct access storage devices), 105 
Data 
character, 170 
compression, 180 
conversion, 435-436 
dependence, 195 
field, 170 
file, 173 
fundamental concepts, 170-175 
information versus, 34 
integration, 195 
integrity, 195 
mergers and, 171-172 
modeling process, 182 
planning process, 181 
processing into information, 35 
record, 170-173 
redundancy, 195 
standardization, 195 
static, 191-192 
Data definition language (DDL), 180 
Data dictionaries, 180, 181 
Data entry, 285 
Data marts, 191 


Data mining, 192-193 
for decision support, 369-371 
software, 369, 370 
Data resource management, 169-206 
approach, 196-200 
data mining and, 191-193 
data warehouses and, 191-193 
database types and, 185-191 
file processing and, 194-196 
summary, 201 
technical foundations, 170-184 
Data resources, 508 
defined, 4 
example, 34 
forms, 33 
input, 35 
management technologies, 34 
storage of, 36 
Data types, 179, 181 
Data visualization systems (DVS), 
364-367 
defined, 364 
example, 366-367 
illustrated, 365 
Data warehouses 
data marts, 191 
enterprise (EDW), 269, 270 
illustrated, 192 
Database administrators (DBAs), 180 
Database management, 170 
approach, 196-200 
software, 197 
summary, 201 
Database management system (DBMS), 
175, 197 
in application development, 200 
in database maintenance, 200 
defined, 196 
object-oriented, 179 
relational, 179 
software components, 198 
Database servers, 232 
Database structures, 175-179 
defined, 175 
evaluation of, 179 
hierarchical, 175, 176 
illustrated, 175 
multidimensional, 177, 178 
network, 175, 176 
object-oriented, 177-179 
relational, 175, 176 
relational operations, 177 
Databases, 173-175 
application development, 198, 200 
CRM, 267 
defined, 173-174 
design, 181-183 
development, 180-183, 198, 201 
distributed, 185-189 
entities, 174 
external, 189 
hypermedia, 189-190 
interrogation, 198-200 
logical design, 182 
maintenance, 198, 200, 285 
operational, 185 
physical design, 182, 183 
relationships, 174 
schemas, 183 
types of, 201 
DBAs (database administrators), 180 


DBMS. See Database management 
system 
DDOS. See Distributed denial of service 
(DDOS) 
Decision support, 350-377 
data mining for, 369-371 
data visualization systems, 364-367 


decision support systems (DSS), 357-358, 


367-372, 398 
enterprise portals and, 374-376 
executive class, 355 
executive information systems (EIS), 
372-374, 398 
geographic information systems (GIS), 
364-367 
knowledge management systems, 376 
management information systems (MIS), 
359-360, 397 
online analytical processing (OLAP), 
361-364, 397-398 
trends, 354-357, 397 
Decision support systems (DSS), 10 
components, 357-358 
defined, 15 
elements, 354 
example, 357 
goal-seeking analysis, 367, 368 
model base, 357 
optimization analysis, 367, 369 
sensitivity analysis, 367, 368 
software packages, 358, 367 
summary, 398 
using, 367-372 
what-if-analysis, 367-368 
Decisions 
level of management, 350 
semistructured, 354 
structured, 354 
unstructured, 354 
Deliverables, 416, 440 
Demand reports/responses, 360 
Denial of serice attacks, 487-488 
Dense wave division multiplexing 
(DWDM), 236 
Dependence diagrams, 431 
Desktop publishing (DTP) software, 132 
Development centers, 511 
Development processes, 7-8 
Differentiation strategy, 48, 49 
Digital cameras, 101 
Digital dashboards, 374 
Digital network technologies, 211 
Digital systems, 235 
Direct access storage devices 
(DASDs), 105 
Direct conversion, 437-438 
Direct cutover approach, 437-438 
Disaster recovery, 495 
Discrete speech recognition, 97 
Distributed computing, 88 
Distributed databases. See also Databases 
advantages, 185-189 
defined, 185 
disadvantages, 189 
duplication process, 189 
updating, 189 
Distributed denial of service (DDOS), 
487-488 
defending, 487 
defined, 487 
example, 488 


Distributed shared memory (DSM), 86 
Documentation, 436 
Documents 
generation, 285 
source, 35 
word processing, 132 
Drill-down, 361 
DTP (desktop publishing) software, 132 
Dumb terminals, 81 
DVD+RW disks, 110 
DVD-ROM disks, 110 
DVS. See Data visualization systems 
DWDM (dense wave division 
multiplexing), 236 


EAI. See Enterprise application integration 
(EAD) 
E-business 
applications, 12, 26 
global, technology management, 525 
role in business, 12—13 
suite implementation, 127-128 
E-business systems, 259-309 
accounting, 300-301 
customer relationship management 
(CRM), 265-271 
enterprise, 260-288 
enterprise application integration (EAI), 
282-283 
enterprise collaboration systems (ECS), 
286-288 
enterprise resource planning (ERP), 
271-276 
financial management, 302 
functional, 289-302 
human resource systems, 297-299 
introduction to, 260 
manufacturing, 295-297 
marketing, 289-295 
supply chain management (SCM), 276-282 
transaction processing systems (TPS), 
283-286, 302 
E-commerce, 312-375 
access control and security, 318 
advantages, 312 
applications, 26, 324-342 
business processes, 315 
business-to-business (B2B), 317, 
335-336, 342 
business-to-consumer (B2C), 316, 
324-330, 342 
categories of, 316-317 
channel choices, 341 
channel strategy, 341 
clicks and bricks, 338-342 
in closing deals, 319 
collaboration and trading, 321 
consumer-to-consumer (C2C), 316-317 
content and catalog management, 319, 320 
defined, 13, 260 
electronic payment processes, 322-323 
essential processes, 317-321 
event notification, 321 
expansion of, 23-24 
integration, 338-339 
introduction to, 312 
issues, 324-342 
marketplaces, 336-337 
process architecture, 317 
profiling and personalizing, 318 
purchasing processes, 320-321 


E-commerce—Cont. 
scope of, 312-317 
search management, 318 
success factors, 328 
summary, 342 
systems, 311-348 
technologies, 312 
trends, 324 
workflow management, 320 
Economic feasibility, 412 
ECS. See Enterprise collaboration systems 
EDW (enterprise data warehouse), 
269, 270 
EFT (electronic funds transfer), 322-323 
EIP. See Enterprise information portals 
EIS. See Executive information systems 
Electronic communication tools, 286 
Electronic conferencing tools, 286-287 
Electronic data interchange (EDI), 279 
Electronic data processing (EDP), 10 
Electronic funds transfer (EFT), 322-323 
Electronic mouse, 93 
Electronic Protected Health Information 
(EPHI), 475 
Electronic spreadsheets, 133-134 
E-mail 
defined, 130 
flame mail, 476 
functioning, 130-131 
junk, 476 
monitoring, 489 
software, 131 
spam, 471-472, 476 
workplace abuse, 465, 466 
Employee self-service (ESS) intranet, 299 
Employment challenges, 477 
Encapsulation, 177 
Encryption, 485 
End users 
application software for, 124-127 
computing resources, 10 
defined, 32 
participation, 441-442 
resistance, 441 
responsible, 20 
End-user computing, 10 
End-user development, 420-423 
control measures, 421 
defined, 420 
doing, 421-422 
encouraging, 423 
example, 422-423 
illustrated, 421 
IS activities, 420-421 
summary, 445 
ENIAC (Electronic Numerical Integrator 
and Computer), 77 
Enterprise application integration (EAI), 
282-283 
defined, 282 
functioning, 282 
software, 150, 282 
use example, 283 
Enterprise applications, 260-263 
architecture, 260-263 
cross-functional, 260-264, 302 
defined, 260 
Enterprise business systems, 260-288 
cross-functional applications, 260-263 
customer relationship management 
(CRM), 265-271 
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Enterprise business systems—Cont. 
enterprise application integration (EAI), 
282-283 
enterprise collaboration systems (ECS), 
286-288 
enterprise resource planning (ERP), 
271-276 
managing, 264-265 
supply chain management (SCM), 
276-282 
transaction processing systems (TPS), 
283-286, 302 
Enterprise collaboration systems (ECS), 
286-288 
collaborative work management 
tools, 288 
defined, 12, 14, 286 
electronic communication tools, 286 
electronic conferencing tools, 286-287 
functions, 286 
tools, 286-288 
use example, 288 
Enterprise data warehouse (EDW), 
269, 270 
Enterprise information portals (EIP), 
374-376 
components, 375 
defined, 374 
development, 374-376 
digital dashboard, 374 
illustrated, 375 
summary, 398 
Enterprise resource management 
(ERM), 181 
Enterprise resource planning (ERP), 11, 
263, 271-276, 529 
application components, 272 
benefits and challenges, 273-275 
business value of, 273 
costs of, 273-274 
defined, 271, 272 
failure causes, 275 
implementation, 273-274 
real-time view, 272 
software, 56, 272 
success with, 275-276 
summary, 303 
Entity relationship diagrams (ERDs), 
181, 182 
Environment, 29, 31 
EPHI (Electronic Protected Health 
Information), 475 
Ergonomics, 479, 480 
ERM (enterprise resource management), 181 
ERP. See Enterprise resource planning 
ES. See Expert systems 
ESS (executive support system), 372 
E-tailers, 319 
Ethernet protocol, 208-211 
Ethical guidelines, 458-459 
Ethics, 454-460 
business, 454-458 
of business professionals, 454-460 
responsibilities, 20, 454-460 
summary, 496-497 
technology, 458 
Evaluation factors, 432-435 
defined, 432 
hardware, 433 
IS services, 434-435 
software, 434 
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Event notification, 321 
Exception reports, 360 
Executive information systems (EIS), 
11, 372-374 
critical success factors (CSFs), 372 
defined, 15, 372 
example, 373-374 
features, 372-373 
illustrated, 373 
summary, 398 
Executive sponsors, 440 
Executive support systems 
(ESS), 372 
Expert systems (ES), 11, 384-388 
application criteria, 389 
applications, 385-386 
benefits of, 386 
components, 384-385 
in decision management, 387 
defined, 16, 384 
in design/configuration, 387 
developing, 388-390 
in diagnostic/troubleshooting, 387 
knowledge base, 385 
limitations of, 386-387 
in process monitoring/control, 387 
in selection/classification, 387 
shells, 385, 388-389 
software resources, 385 
summary, 398 
Explicit knowledge, 64 
Exponential growth, 208 
EXtensible Markup Language. 
See XML 
External databases, 189 
Extranets, 219 
defined, 222 
illustrated, 223 
role of, 222-224, 252 
use example, 223-224 


Failures in IT management, 517-521. 


See also Information technology 
management 
defined, 518 
examples, 517 
IT governance, 518-520 
management involvement, 518 
summary, 537 
Fault-tolerant systems, 493-494 
Feasibility 
economic, 412 
human factors, 413 
legal/political, 413 
operational, 411-412 
schedule, 411-412 
studies, 410-411 
technical, 412-413 
types of, 411 
Feedback 
defined, 29 
information system, 30 
monitoring/evaluating, 36 
Fiber optics, 236 
Fields, 170 
Fifth-generation languages 
(5GLs), 152 
File maintenance programs, 195 
File management, 143 
File processing, 194, 195 
File servers, 229 


Files 
backup, 491-492 
defined, 173 
types of, 173 
Web cookie, 333 
Financial management systems, 302 
Financial planning software, 302 
Firewalls, 486 
Fixed-length records, 173 
Flame mail, 476 
Flat files. See Files 
Ford SYNC, 98-99 
Fourth-generation languages, 152 
Frame-based knowledge representation, 
384, 385 
Fraud detection, 371 
Frequency division multiplexing (FDM), 242 
Front-end CASE tools, 161 
Functional business systems, 289-302 
accounting, 300-301 
examples, 292 
human resources, 297-299 
manufacturing, 295-297 
marketing, 289-295 
summary, 303 
Functional requirements analysis, 415-416 
Function-specific application 
software, 128 
Fuzzy logic. See also Artificial intelligence (AT) 
in business, 392 
defined, 391 
rules example, 392 
terminology, 391 


Garbage in, garbage out (GIGO), 495 
Genetic algorithms, 392-393 
defined, 392 
example, 392-393 
mutation, 392 
software, 383 
Geographic information systems (GIS), 
364-367 
defined, 364 
illustrated, 365 
Gigabytes (GB), 105 
Gigahertz (GHz), 90 
GIS. See Geographic information systems 
Global information technology 
management. See also Information 
technology management 
activities, 522—525 
business drivers, 528 
business/IT applications, 528-529 
business/IT strategies, 527-528 
challenges, 522-523 
cultural challenges, 526 
data access issues, 532—533 
defined, 522 
geoeconomic challenges, 526 
international dimension, 522 
Internet as platform, 531-532 
platforms, 530-532 
political challenges, 526 
summary, 537 
systems development, 535-536 
Global positioning system (GPS), 364 
Globalization, 264 
Goal-seeking analysis, 367, 368 
Gradual conversion, 439 
Graphical queries, 200 
Graphical user interfaces (GUIs), 129, 140 


Grid computing, 75-76 
advantages/disadvantages, 88 
cloud computing versus, 138 
defined, 88 

Groupware. See also Software 
defined, 135 
software features, 136 
virtual teams, 12, 135 

Growth strategies, 48, 49 

GUIs. See Graphical user interfaces 


Hacking. See also Computer crime 
common tactics, 462 
cracking versus, 462 
defined, 461 
Hardware, 73-121 
ALTAIR 8800, 78 
APPLE, 78 
computer systems, 78-90 
defined, 4 
digital cameras, 101 
ENIAC, 77 
evaluation factors, 433 
grid computing and, 75-76, 88 
history of, 74-78 
IBM PC, 78 
information appliances, 82-83 
input technologies, 93-101 
keyboards, 93 
mainframe, 85-88 
microcomputer, 79-83 
midrange system, 83-85 
network computer (NC), 82 
optical scanning, 99-100 
output technologies, 101-103 
pen-based, 96-97 
peripherals, 93-106 
pointing devices, 93-96 
printers, 102-103 
resources, 32—33 
smart cards, 101 
speech recognition, 97-99 
storage, 103-111 
supercomputer, 86 
terminals, 81-82 
UNIVAC I, 77 
video monitors, 102 
Health Insurance Portability and 
Accountability Act (HIPAA), 475 
Health issues, 479 
Help desk software, 267 
Hierarchical structure, 175, 176 
High-earth orbit (HEO) communications 
satellites, 237 
High-level languages, 151-152 
High-speed packet access (HSPA), 210 
HIPAA (Health Insurance Portability and 
Accountability Act), 475 
History files, 173 
HRM. See Human resource management 
HTML (Hypertext Markup Language), 
154-155, 189 
Hubs, 242 
Human factor engineering, 479 
Human factors feasibility, 413 
Human resource information systems 
(HRIS), 297 
Human resource management (HRM), 
297-299 
corporate intranets and, 298-299 
defined, 297 


Human resource management—Cont. 
Internet and, 297 
summary, 303 
support, 298 
use example, 299 
Hypermedia databases, 189-190 


IBM PC, 78 
Identity theft, 473-474 
IF-THEN rules, 389 
Image processing, 111 
Impulse purchases, 334-335 
Individuality, challenges of, 478-479 
Information 
data versus, 34 
decision maker requirements, 353 
quality, 350, 353 
Information appliances, 82-83 
Information centers, 510 
Information processing, 32 
Information retrieval, 382 
Information systems 
accounting, 300-301 
activities, 35-36 
areas framework, 7 
careers, 22 
components, 30, 31-32 
controls, 495 
defined, 4 
environment, 31 
examples, 4-7 
expert (ES), 11, 16 
feedback and control, 30 
field, growth of, 23 
foundation concepts, 4—42 
function, 24-25 
human resource, 297-299, 303 
job prospects, 23 
knowledge areas, 7-8 
knowledge management, 11, 16 
management, 354 
management support, 14-15 
manufacturing, 295-299, 303 
marketing, 289-295, 303 
model, 31, 37 
operation management, 511 
operations and management 
classifications, 13 
operations support, 13-14 
recognizing, 36 
resources, 31-35, 37 
roles in business, 4 
services, evaluation factors, 434-435 
solutions, 18-19 
strategic (SIS), 11 
strategic information, 11, 16 
success, 17 
transformation process, 30 
trends in, 10-12 
Information systems professionals 
in end-user development, 420 
jobs for, 21-22 
recruiters, 22 
responsible, 458 
world of, 22 
Information technology (IT), 7 
agile companies and, 62 
architecture, 508-509 
career challenges, 21-24 
challenges, 20 
competing with, 43-71 


Information technology—Cont. 
developing, 26 
driven by customer data, 53-54 
effectiveness, 17 
ethics, 20, 454-460 
investments in, 50 
jobs, 512-513 
knowledge management in, 65 
managerial challenges, 16-25 
managing, 26 
organization, 509 
organizing, 510-514 
in reengineering, 56-59 
security management, 481-496 
strategic, 44 
strategic uses, 48-50 
success and failure with, 17 
summary, 537 
Information technology governance (ITG), 
518-520 
Information technology management, 
504-521 
application development, 510-511 
business/IT planning, 507-509 
components, 504, 507 
executives, 512 
failures in, 517-521, 537 
function, 509 
global, 522-537 
IS operations, 511 
organization, 510-514 
outsourcing and offshoring, 
514-517 
staff planning, 512 
technology, 513 
user services, 513-514 
Inkjet printers, 102 
Innovation strategy, 48, 49 
Input 
computer system, 89 
defined, 26 
devices, 93-101 
Inquiry processing, 286 
Instant messaging (IM), 131 
Intangible benefits, 412 
INTELLECT, 152 
Intelligent agents, 383, 395-397 
defined, 395 
example, 397 
examples, 396 
graphic representation, 395 
information management, 396 
software, 396 
as software surrogate, 395 
user interface, 396 
Intelligent terminals, 81, 82 
Interactive marketing. See also Marketing 
systems 
customer participation, 292 
defined, 289 
expected outcomes, 293 
Interfaces 
defined, 29 
graphical user (GUIs), 129, 140 
software, 140 
user, 35, 140 
WIMP, 94, 95 
International data communications 
issues, 530 
International dimensions, 522 
Internet2, 213-214 
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Internet, 12, 215-219 
access, 534 
applications, 216 
as backbone network, 229 
business uses, 217 
business value, 218-219, 252 
defined, 215 
evolution, 215 
example, 231 
global government restrictions, 534 
as global IT platform, 531-532 
growth, 211 
HRM and, 297 
illustrated, 230 
number of users, 211 
online exchange, 12 
popular uses, 216 
privacy, 473 
revolution, 215-219, 252 
root servers, 215 
TCP/IP, 247-248 
telephony, 248 
trading platforms, 321 
workplace abuses, 465 
world usage statistics, 532 
Internet protocol (IP), 248 
Internet service providers (ISPs), 215-216 
Internet terminals, 81 
Internetwork processors, 242 
Internetworked security defenses. See also 
Security; Security management 
distributed denial of service (DDOS), 
487-488 
e-mail monitoring, 489 
encryption, 485 
firewalls, 486 
virus defenses, 489-490 
Interoperability network, 251 
Interpreters, 160 
Intranets 
accessing, 219 
business value, 219-221 
defined, 219 
as development/deployment 
platform, 221 
employee self-service (ESS), 299 
HRM and, 298-299 
portal management, 221 
role of, 219-222, 252 
use example, 221-222 
IS specialists, 32 
IT staff planning, 512 
ITG (information technology governance), 
518-520 


Java, 153 
applets, 157 
benefits and limitations, 158 
defined, 157 
programming tool, 160 
Jobs, IT, 512-513 
Junk e-mail, 476 


Keyboard stuffing, 333 
Keyboards, 93 
Kilobytes (KB), 105 
Klez virus, 469 
Knowledge 
discovery, 369 
engineering, 389-390 
explicit, 64 


588 © Subject Index 


Knowledge—Cont. 
representation methods, 384 
tacit, 64 
Knowledge bases, 376, 385 
Knowledge management, 263 
in information technology, 65 
levels, 64 
successful, 64 
Knowledge management systems (KMS), 
11, 376 
defined, 16, 65 
facilitation, 65 
obstacles, 441 
Knowledge-based information systems 
(KBIS), 384 
Knowledge-creating companies, 64-65, 66 


LANs. See Local area networks 
Laser printers, 102-103 
“Last mile,” 236-237 
Legacy systems, 232 
Legal/political feasibility, 413 
LEO (low-earth orbit) satellites, 238 
Licensing, software, 139 
Life cycle approach, 409 
Link farms, 333 
Linux, 146, 149 
Liquid crystal displays (LCDs), 102 
Local area networks (LANs), 79, 229 
defined, 229 
illustrated, 230 
network servers, 229 
wireless (WLANS), 239 
Logical analysis, 415 
Logical design frameworks, 182 
Logical model, 415 
Low-earth orbit (LEO) satellites, 238 


Mac OS X, 147-148 
Machine languages, 150-151 
Machine learning, 383 
Magnetic disks, 108 
Magnetic ink character recognition 
(MICR), 101 
Magnetic tape, 109 
Mainframe systems. See also Computer systems 
defined, 85 
illustrated, 78 
information processing, 85 
supercomputer, 86-87 
types of, 78 
Management challenges, 8 
Management information systems (MIS), 10, 
354, 359-360 
decision maker use of, 359-360 
defined, 359 
reporting alternatives, 360 
summary, 397 
Management support systems, 14-15 
Manufacturing execution systems (MES), 297 
Manufacturing systems, 295-299 
computer-aided (CAM), 297 
computer-integrated, 296-297 
flexible, 296 
manufacturing execution systems (MES), 297 
material requirements planning (MRP), 
296-297 
numerical control, 297 
process control, 297 
production/operations function, 295 
summary, 303 


Market basket analysis (MBA), 370-371 
applications, 371 
defined, 370 
Marketing systems, 289-295 
information technologies, 292 
interactive, 289-293 
sales force automation, 289, 294-295 
summary, 303 
targeted, 293-294 
types of, 289 
Mass customization, 319 
Massive parallel processing (MPP), 86 
Material requirements planning (MRP), 
296-297 
MBA. See Market basket analysis 
Medium-band channels, 250 
Megabytes (MB), 105 
Megahertz (MHz), 90 
Mergers, 171-172 
MES (manufacturing execution systems), 297 
Metadata 
defined, 191 
repositories, 180 
Metcalfe’s law, 208-211 
Metropolitan area networks (MANSs), 228-229 
MICR (magnetic ink character 
recognition), 101 
Microcomputer systems. See also Computer 
systems 
defined, 79 
desktops, 79 
illustrated, 78 
information appliances, 82-83 
network computers (NCs), 82 
notebook, 79, 80 
sizes and shapes, 79 
terminals, 81-82 
types of, 78 
Microprocessors, 90 
Middleware 
defined, 212 
importance, 212-213 
telecommunications, 212-213 
Midrange systems. See also Computer systems 
defined, 83 
illustrated, 78, 84 
types of, 78 
uses, 84 
Minisupercomputers, 86 
MIS. See Management information systems 
Modems, 241-242 
Moderated discussions, 132 
Monitors, video, 102 
Monte Carlo simulation, 359 
Moore’s law, 90-92 
defined, 90 
illustrated, 91 
interpretation, 91 
prediction, 92, 114 
MPP (massively parallel processing), 86 
MRP (material requirements planning), 
296-297 
Multidimensional structure, 177, 178 
Multinational development teams, 535 
Multiplexers, 242-243 
Multitasking, 144 
MyDoom virus, 469 


Napster network, 234 
Narrow-band channels, 250 
Natural interfaces, 383 


Natural languages, 383 
Natural queries, 200 
.NET, 157, 158 
Netsky virus, 469 
Network architectures, 245-249 
defined, 245 
OSI model, 245-247 
TCP/IP, 247-248 
VoIP, 248-249 
Network computers, 82, 232 
Network computing, 232-233 
Network infrastructure, 35 
Network interface cards, 229 
Network management, 243-244 
functions, 244 
software, 149 
Network monitoring, 244 
Network operating systems (NOSs), 229 
Network resources, 34-35 
Network servers, 229 
Network sniffers, 323 
Network structure, 175, 176 
Networks 
bus, 244 
client/server, 231-232 
concept, 208-211 
defined, 4 
digital technologies, 211 
Ethernet protocol, 208-211 
Internet2, 213-214 
interoperability, 251 
local area (LANs), 229 
Metcalfe’s law, 208-211 
metropolitan (MANs), 228-229 
nodes, 208 
peer-to-peer (P2Ps), 233-234 
protocols, 245 
ring, 244 
star, 244 
telecommunications, 208-257 
topologies, 244-245 
virtual private (VPNs), 229-231 
wide area (WANS), 228 
Neural networks, 390-391 
application example, 390-391 
defined, 390 
example, 390-391 
neurons, 390 
training, 391 
Notebook microcomputers, 80 
Numerical control, 297 


Object-based knowledge representation, 
384, 385 
Object-oriented analysis (OOA), 409, 424 
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